Overview

overview

10

Static

static

3

dhl_paket_...15.exe

windows7-x64

10

dhl_paket_...15.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cd8c9e5ed1a2e801a6632250ff4ac59_JaffaCakes118

  • Size

    126KB

  • Sample

    241009-hr4t8avfqa

  • MD5

    2cd8c9e5ed1a2e801a6632250ff4ac59

  • SHA1

    edcda979442021693a5f29639368463067b2b07e

  • SHA256

    9d89fa8ea6ea10c1e6d1efea3d05f40c87d758089f084fb87f646b2d201774ec

  • SHA512

    74aec0fa5601719fddb97ca59b9cb5132226359c88ab63169dc6d248765bfb37ab6269ba18cb1b6eecf02c7ab47e4f65a31ebc885bbb0f3e088bfbdf72c04edf

  • SSDEEP

    3072:QRNTX5SGuscGGCUyJebwghLMCOj4FT0dX5SsO39:eoGDRUyJEwgyv9bOt

Score
10/10
emotetbankerdiscoverytrojan

Malware Config

Targets

    • Target

      dhl_paket_225436695911497__ID__359304352618894LVK___LQ_C__F05_06_2015___DHL07_17_15.exe

    • Size

      188KB

    • MD5

      c3dd665a7938d4483a9f5bdae69183bf

    • SHA1

      5d968a8db0c800328fd372e02c4fe00a568ccba4

    • SHA256

      572561ac419cac3aab3c14e2a9c97452d74f2d068e377622a6af2c7ce83a1650

    • SHA512

      21a2ca0037f18d73f7290579cce5ebf0f58e4c5f3f6d300e5f2905749523bb14a752cb9ec8755c7287eeee0b1cd3b75d75069a1ef979168e52e08c6625e8e77a

    • SSDEEP

      3072:Ipe/rgTsjXUmVAi60q6z+7FtcGGCUyJebaghLMCOj4FT0weiwWhw1gb:2eMcfo0q8+ZtRUyJEagyv9weiwWhw10

    Score
    10/10
    emotetbankerdiscoverytrojan

    • Detect Emotet payload

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks