Overview

overview

10

Static

static

3

ff95dab004...eN.exe

windows7-x64

10

ff95dab004...eN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff95dab004cf42ec1a6864afa6220bf946d6807741455f567e3af747f5502e6eN.exe

  • Size

    219KB

  • Sample

    241123-we93csvqfj

  • MD5

    06b92478cb19fde2665038cbdd0b1420

  • SHA1

    1e025bd647fb544e140b5d1922f9967166e76ecb

  • SHA256

    ff95dab004cf42ec1a6864afa6220bf946d6807741455f567e3af747f5502e6e

  • SHA512

    95e342a0a79985dfe2557837ecce6b9b9523233c4a1335295fbe78e7bf8645990d763686c381a627dcf3e62acdc846cb48c4514cef304e4693216a8539251974

  • SSDEEP

    3072:3RlzaDXLsnDvTuPuoD2UKaxwExELFuWpWN71AC4WSttt1ka3OuRXdHQIZ:3XzC43GdPHj447raLL

Score
10/10
emotetbankerdiscoverytrojan

Malware Config

Targets

    • Target

      ff95dab004cf42ec1a6864afa6220bf946d6807741455f567e3af747f5502e6eN.exe

    • Size

      219KB

    • MD5

      06b92478cb19fde2665038cbdd0b1420

    • SHA1

      1e025bd647fb544e140b5d1922f9967166e76ecb

    • SHA256

      ff95dab004cf42ec1a6864afa6220bf946d6807741455f567e3af747f5502e6e

    • SHA512

      95e342a0a79985dfe2557837ecce6b9b9523233c4a1335295fbe78e7bf8645990d763686c381a627dcf3e62acdc846cb48c4514cef304e4693216a8539251974

    • SSDEEP

      3072:3RlzaDXLsnDvTuPuoD2UKaxwExELFuWpWN71AC4WSttt1ka3OuRXdHQIZ:3XzC43GdPHj447raLL

    Score
    10/10
    emotetbankerdiscoverytrojan

    • Detect Emotet payload

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet family

      emotet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks