emotet | 39afc2c85f7e4824b7692a5008fc22af5f32bde9d933f2a6b8f207657f937ba9 | Triage

Sharing

General

Target

39afc2c85f7e4824b7692a5008fc22af5f32bde9d933f2a6b8f207657f937ba9N
Size

171KB
Sample

241004-m18xrazelj
MD5

a8acf988cb6a5c153a65a4b54a3181c0
SHA1

8f8d6fac4fa529bdc09602452fb35ac4a50724d4
SHA256

39afc2c85f7e4824b7692a5008fc22af5f32bde9d933f2a6b8f207657f937ba9
SHA512

9b6361ab7d489886ebbbcc79307b22580b2531afbbb033175e4a47fce80c3a191745ed2956a23eab3d044d6ad965b4b9173e4a53594d8834ea5b1bfbeeadd2e9
SSDEEP

3072:Mh9fEKZLk/lvI6enmhUcUygISmrEm0JgEh/QwbJcQBEnq0W4yc6JCuIdM5+iHg:MEP/hHenK5NSmglbh/Qw0X6jF

Score

10^/10

emotet banker discovery trojan

Malware Config

Targets

- Target
  
  39afc2c85f7e4824b7692a5008fc22af5f32bde9d933f2a6b8f207657f937ba9N
- Size
  
  171KB
- MD5
  
  a8acf988cb6a5c153a65a4b54a3181c0
- SHA1
  
  8f8d6fac4fa529bdc09602452fb35ac4a50724d4
- SHA256
  
  39afc2c85f7e4824b7692a5008fc22af5f32bde9d933f2a6b8f207657f937ba9
- SHA512
  
  9b6361ab7d489886ebbbcc79307b22580b2531afbbb033175e4a47fce80c3a191745ed2956a23eab3d044d6ad965b4b9173e4a53594d8834ea5b1bfbeeadd2e9
- SSDEEP
  
  3072:Mh9fEKZLk/lvI6enmhUcUygISmrEm0JgEh/QwbJcQBEnq0W4yc6JCuIdM5+iHg:MEP/hHenK5NSmglbh/Qw0X6jF
Score

10^/10

emotet banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerdiscoverytrojan

behavioral2