Extracted

• • Target

    CU211490942534_202303220815.doc

  • Size

    290KB

  • MD5

    9e165cbfb9c884725bbd4df0f83b139a

  • SHA1

    713a6d2bc02f69c677c15a6552185eca010394dd

  • SHA256

    c7cb8dbdcd8cfdb6d2440080afc3e715b6984b5ab2b88e9919fbb70136325368

  • SHA512

    cc0a6546df04e53546ab456d380c61b8859555e7219a34f42161157b157d59bfc31caff7b216be57186aa9d369fc7d2a0f64e2c9bf53956941b779478b52261f

  • SSDEEP

    3072:Fnmahvzr1u2/MbZWMRch0bND6b38zFjjac92mM0WDTAG7UaVGVFoQ9cTMsTViEdp:YkvgZWth0bd6b3QnJ2JbuaaqTMCJp

  Score

  10^/10

  emotetepoch4bankerpersistencetrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2