emotet | b0c45827c169df0b99fa9cd7be05dde1650bd2bb539902ca97168a3a515fd6e6 | Triage

Sharing

General

Target

b0c45827c169df0b99fa9cd7be05dde1650bd2bb539902ca97168a3a515fd6e6N
Size

165KB
Sample

241016-btnsfszdqj
MD5

fa1211e41b143c2b38c7b3dc3db2d580
SHA1

a58e03b6a14df8584b938fbb6248e22c66d406ff
SHA256

b0c45827c169df0b99fa9cd7be05dde1650bd2bb539902ca97168a3a515fd6e6
SHA512

4d56b338c75fbcb9608cff028ce285379e7993bf701a7bfa37608219da34915349ff5c29256b5d82813c374e5f57f0207e879c40ca440d4eaeae1f4cc01f7b1e
SSDEEP

3072:fWMG0BC83uZtGi5jKJZxgedEZ053JfU90WZXP6JvoQnK5+ivgX:fXC83nZSedEZ053Sd6pnc

Score

10^/10

emotet banker discovery trojan

Malware Config

Targets

- Target
  
  b0c45827c169df0b99fa9cd7be05dde1650bd2bb539902ca97168a3a515fd6e6N
- Size
  
  165KB
- MD5
  
  fa1211e41b143c2b38c7b3dc3db2d580
- SHA1
  
  a58e03b6a14df8584b938fbb6248e22c66d406ff
- SHA256
  
  b0c45827c169df0b99fa9cd7be05dde1650bd2bb539902ca97168a3a515fd6e6
- SHA512
  
  4d56b338c75fbcb9608cff028ce285379e7993bf701a7bfa37608219da34915349ff5c29256b5d82813c374e5f57f0207e879c40ca440d4eaeae1f4cc01f7b1e
- SSDEEP
  
  3072:fWMG0BC83uZtGi5jKJZxgedEZ053JfU90WZXP6JvoQnK5+ivgX:fXC83nZSedEZ053Sd6pnc
Score

10^/10

emotet banker discovery trojan
- Emotet
  Emotet is a trojan that is primarily spread through spam emails.
  trojan banker emotet
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

emotetbankerdiscoverytrojan

behavioral2