Extracted

• • Target

    Sogawaluggage.co.doc

  • Size

    279KB

  • MD5

    bbe88ae0611387f29af2651582441e72

  • SHA1

    10997a9f041aa7f8beb75c80db1bc3c092793567

  • SHA256

    ce13efb65d134aae87b36ae9433d5f51e50bffe024cf80c9c4e0bfba6491ef5d

  • SHA512

    22a710b1b47bdfd073737d45950c6c30059273d8c47e0b926c06f6a81e8154032727392c66e695eb2b2534a33f0829aa53f8e1269f86f63a8a102abd70590564

  • SSDEEP

    3072:JPO2nw8TvYbnIrmOPYPMbZEg+wVlDz6dOK3PtoQnRhPrr2ZswO/ON1:hOlW0oREwD/yPtPRhPrUs3U

  Score

  10^/10

  emotetepoch4bankerpersistencetrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2