emotet | 513937eca95b5c969a67c9592045a66bfeedd732003832ea51a39d2e9e493480 | Triage

Sharing

General

Target

513937eca95b5c969a67c9592045a66bfeedd732003832ea51a39d2e9e493480
Size

114KB
Sample

240518-t8424adb98
MD5

55bbc2f9ef2df8f45e2019fc5ae8b578
SHA1

f7c0743a0b5c6db5ec21ad242c35c0fe9cb40043
SHA256

513937eca95b5c969a67c9592045a66bfeedd732003832ea51a39d2e9e493480
SHA512

a21a35874978166e18e0bcef76ab022ac41cc23f557cdc9dd90ce10596b0b6ac537c0d91d847a28be524988261d65d432595f646b39de79d9f154732d0cf6910
SSDEEP

3072:0qn9neAbRXrlpvEatMhWR1dBl1Y8zCV+7dox0SUDa:feAbR7jPt6SH19C0Gx/

Score

10^/10

emotet banker trojan

Malware Config

Targets

- Target
  
  90152e847d02fe9ed6802bf437c89bbad41abfc0b9552c5c75f7432541e8e94b
- Size
  
  192KB
- MD5
  
  5ef571b6a4f2ff6300f3a3b50bfd0632
- SHA1
  
  9360645cf56f7b512046a2734fdc845bedbe6742
- SHA256
  
  90152e847d02fe9ed6802bf437c89bbad41abfc0b9552c5c75f7432541e8e94b
- SHA512
  
  b553c9637b09cd7e11984e5e532a412601ba149ad0af5168be54273dbb9750fa43133e9c71264de9cae423f55394b7ad7051f067928e957f003726c8cad16a58
- SSDEEP
  
  3072:5Mvj+eIAbeWsy7hy/049Vem7l2fySg7+ehmIHELhxVy/5/YoayJ8gCy6IKxzQy:+vj2AbeWsy204rLlKlk+HIqhxVyhweAg
Score

10^/10

emotet banker trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankertrojan

behavioral2

emotetbankertrojan