Overview

overview

10

Static

static

3

dhl_paket_...15.exe

windows7-x64

10

dhl_paket_...15.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2eed56eb7680493c881128382d4e00dc_JaffaCakes118

  • Size

    126KB

  • Sample

    241009-lrhtjawckq

  • MD5

    2eed56eb7680493c881128382d4e00dc

  • SHA1

    842f0916a3346d504b264d7f041e72059ba2365d

  • SHA256

    aa4118b3e7614573adbf206f0dacfda343ec2c6ac2420cbb61ddfb5599b4186e

  • SHA512

    60c035eb712e3145d7d3318658977526e3f774db584d1c8d73d1f9d113dded7710df70917992b33144743096a27eccdcf078d649c1ea9577841a33dc1da0872e

  • SSDEEP

    3072:sRNTX5SGuscGGCUyJebwghLMCOj4FT0dX5SsO3B:aoGDRUyJEwgyv9bOx

Score
10/10
emotetbankerdiscoverytrojan

Malware Config

Targets

    • Target

      dhl_paket_771822473505788__ID__225873627962004LCH___JV_V__K05_06_2015___GVU07_17_15.exe

    • Size

      188KB

    • MD5

      c3dd665a7938d4483a9f5bdae69183bf

    • SHA1

      5d968a8db0c800328fd372e02c4fe00a568ccba4

    • SHA256

      572561ac419cac3aab3c14e2a9c97452d74f2d068e377622a6af2c7ce83a1650

    • SHA512

      21a2ca0037f18d73f7290579cce5ebf0f58e4c5f3f6d300e5f2905749523bb14a752cb9ec8755c7287eeee0b1cd3b75d75069a1ef979168e52e08c6625e8e77a

    • SSDEEP

      3072:Ipe/rgTsjXUmVAi60q6z+7FtcGGCUyJebaghLMCOj4FT0weiwWhw1gb:2eMcfo0q8+ZtRUyJEagyv9weiwWhw10

    Score
    10/10
    emotetbankerdiscoverytrojan

    • Detect Emotet payload

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks