Overview

overview

10

Static

static

3

29D6161522...47.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Win32.Emotet.zip

  • Size

    62KB

  • Sample

    240907-k8rbkawhma

  • MD5

    099ec2767271a59ae4fd2cfa9844c9bf

  • SHA1

    ab5228758a9cafeb8ce0b3503aec76641e01af70

  • SHA256

    5b5bc00b4763c0bc089f0c747147b0845332be961d9839e75a60ef5db2382bb6

  • SHA512

    5eb1230aaf679aef789ef365132ba03bf22eb8e06c36e4c36553b0155fd655bb8e1491c840c42b303b58c788ba25d695863ba413a7bae8812157c96354bcab00

  • SSDEEP

    1536:h5LH4poMU4TRCVdls9BpchGcWMWvnw8OXU/UELKu7:DLHht+CVdwBpaGpJZRZ+U

Score
10/10
emotetbankerdiscoverytrojan

Malware Config

Targets

    • Target

      29D6161522C7F7F21B35401907C702BDDB05ED47.bin

    • Size

      94KB

    • MD5

      8baa9b809b591a11af423824f4d9726a

    • SHA1

      29d6161522c7f7f21b35401907c702bddb05ed47

    • SHA256

      6393fe8dd4721190f240e22feeb769675b6194a70cabd5a415c2364686a9089c

    • SHA512

      0e3dd5d496474bc2c4c814f2062d0c099a17663cc80640467533a80d6cbb8baa17b22608edfae63a4e6ec5074fedd56173673142cca22c5699c02e408d097966

    • SSDEEP

      1536:8gVgsgm8VUWq8qt3jhOrpOlVPac2xK2uypKG4lvhGnyVUEom2OEKI:/avzbqTOrpOyc2xKZbcnyVUEof7KI

    Score
    10/10
    emotetbankerdiscoverytrojan

    • Detect Emotet payload

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks