Overview

overview

10

Static

static

3

dhl_paket_...15.exe

windows7-x64

10

dhl_paket_...15.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49002e450ac74eb7a6359e09e8bd37ec_JaffaCakes118

  • Size

    126KB

  • Sample

    241015-vm262szgrn

  • MD5

    49002e450ac74eb7a6359e09e8bd37ec

  • SHA1

    3095d8bbc6ae99d1ac7012b9547717a13c87ebe1

  • SHA256

    fbe3d50b96a8459b9c9b98a80bd4a4917c35db0dd5b529499ce72870807a2965

  • SHA512

    c250d7dfd3c44412c386577cbf491c2b7df4402beb005c44e6c2031ae9ac55533cee8814ff1b0ca3388a94405def5864fbfceb51b59ace5f5d4507bbd2c1e654

  • SSDEEP

    3072:GRNTX5SGuscGGCUyJebwghLMCOj4FT0dX5SsO3r:soGDRUyJEwgyv9bOb

Score
10/10
emotetbankerdiscoverytrojan

Malware Config

Targets

    • Target

      dhl_paket_281946483783811__ID__350972179494713SHL___FG_J__F05_06_2015___GKQ07_17_15.exe

    • Size

      188KB

    • MD5

      c3dd665a7938d4483a9f5bdae69183bf

    • SHA1

      5d968a8db0c800328fd372e02c4fe00a568ccba4

    • SHA256

      572561ac419cac3aab3c14e2a9c97452d74f2d068e377622a6af2c7ce83a1650

    • SHA512

      21a2ca0037f18d73f7290579cce5ebf0f58e4c5f3f6d300e5f2905749523bb14a752cb9ec8755c7287eeee0b1cd3b75d75069a1ef979168e52e08c6625e8e77a

    • SSDEEP

      3072:Ipe/rgTsjXUmVAi60q6z+7FtcGGCUyJebaghLMCOj4FT0weiwWhw1gb:2eMcfo0q8+ZtRUyJEagyv9weiwWhw10

    Score
    10/10
    emotetbankerdiscoverytrojan

    • Detect Emotet payload

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks