Overview

overview

10

Static

static

3

dhl_paket_...15.exe

windows7-x64

10

dhl_paket_...15.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31007771712b8b5c2ff016c3b8aea7f7_JaffaCakes118

  • Size

    126KB

  • Sample

    241010-vnegdawgpb

  • MD5

    31007771712b8b5c2ff016c3b8aea7f7

  • SHA1

    827303177589bdafc4cf5a007d7c2f570b37b655

  • SHA256

    07207287e6a185732dcbc38f3e0c3f60290e24b6d888424bc416f510d6e9213b

  • SHA512

    bb8e030dd69a1510d4302496342687943f84c9b7a6f27484f2bd394fc367637c597cca3194086b94b9b3eacb90e2907b44ac153aee5174c6ce5910e66107587d

  • SSDEEP

    3072:ZRNTX5SGuscGGCUyJebwghLMCOj4FT0dX5SsO34:VoGDRUyJEwgyv9bOo

Score
10/10
emotetbankerdiscoverytrojan

Malware Config

Targets

    • Target

      dhl_paket_455738937528656__ID__329256541129928DKK___GW_C__H05_06_2015___MHD07_17_15.exe

    • Size

      188KB

    • MD5

      c3dd665a7938d4483a9f5bdae69183bf

    • SHA1

      5d968a8db0c800328fd372e02c4fe00a568ccba4

    • SHA256

      572561ac419cac3aab3c14e2a9c97452d74f2d068e377622a6af2c7ce83a1650

    • SHA512

      21a2ca0037f18d73f7290579cce5ebf0f58e4c5f3f6d300e5f2905749523bb14a752cb9ec8755c7287eeee0b1cd3b75d75069a1ef979168e52e08c6625e8e77a

    • SSDEEP

      3072:Ipe/rgTsjXUmVAi60q6z+7FtcGGCUyJebaghLMCOj4FT0weiwWhw1gb:2eMcfo0q8+ZtRUyJEagyv9weiwWhw10

    Score
    10/10
    emotetbankerdiscoverytrojan

    • Detect Emotet payload

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks