Extracted

• • Target

    List_17032023.doc

  • Size

    533.3MB

  • MD5

    fc7d564ec911a71972275055ecba4520

  • SHA1

    350d4ace5bba7462534ee68dc1de32fe2f923a1d

  • SHA256

    a459aaa98ce70d8a962a38f4376bdb76d82a6a3e8c1af621a34031aa0546201d

  • SHA512

    15fe472529b1ea89091b4be12a588e14b307c8fae217e422ffe6eaa099088aea4f2d45a4821f3a6eb7e2a576426de07ee031e54fca3b99635a1a9d2ae81563e3

  • SSDEEP

    6144:ip32/gDd0Nmt71wFmSWjfDrV8YQnZocbyrX4NqclWL9:ip32SEmtJwFmhjfPtrXqqyW

  Score

  10^/10

  emotetepoch5bankerpersistencetrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2