Extracted

• • Target

    6e92a1fbafbc5bee0a4a5babd4041cbfdd9241c1cf7bd7da8f6ff4a688a811f3

  • Size

    3KB

  • MD5

    cf21b34c7584ffa2b1e8f045b3bf8b6d

  • SHA1

    3b7043526a004d28b034621e3754a60d519e871d

  • SHA256

    6e92a1fbafbc5bee0a4a5babd4041cbfdd9241c1cf7bd7da8f6ff4a688a811f3

  • SHA512

    83cc7b098965ac35a70a764c68f95f290d9ec8d1ed8ff2f3dcbcaf61c17d36e662f98b6ef571fe8751721cc086ab1606bbb974c0aa437b963d17b164c8e91df3

  Score

  10^/10

  executionemotetepoch4bankertrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Emotet family

    emotet

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution
  behavioral1behavioral2