General

  • Target

    2861ecacb725eae88fdfa42f2f557dd57f868c5229e238b20505a78b9a8c6a8d.exe

  • Size

    102KB

  • Sample

    241123-z3xcyswrhv

  • MD5

    cb90719709b5d17350891ee2e129517f

  • SHA1

    b2399e3e2e2f3b9a29a132e79dc29c9c8b457ae1

  • SHA256

    2861ecacb725eae88fdfa42f2f557dd57f868c5229e238b20505a78b9a8c6a8d

  • SHA512

    ad8ac8f52c5641e0882bce5e866af37344ba01f3034aad9098c28043cf97da720f5187ac8e6ee85c4f9276cd0d1ed9c6a01f20553d88bf37feb1b8a7306e1aad

  • SSDEEP

    1536:/kOx2aG1RizobU9G0rzO6AA8ub2v+ySfs52mN7C:/F2amizjG0rSrdui+yEy1C

Malware Config

Targets

    • Target

      2861ecacb725eae88fdfa42f2f557dd57f868c5229e238b20505a78b9a8c6a8d.exe

    • Size

      102KB

    • MD5

      cb90719709b5d17350891ee2e129517f

    • SHA1

      b2399e3e2e2f3b9a29a132e79dc29c9c8b457ae1

    • SHA256

      2861ecacb725eae88fdfa42f2f557dd57f868c5229e238b20505a78b9a8c6a8d

    • SHA512

      ad8ac8f52c5641e0882bce5e866af37344ba01f3034aad9098c28043cf97da720f5187ac8e6ee85c4f9276cd0d1ed9c6a01f20553d88bf37feb1b8a7306e1aad

    • SSDEEP

      1536:/kOx2aG1RizobU9G0rzO6AA8ub2v+ySfs52mN7C:/F2amizjG0rSrdui+yEy1C

    • Detect Emotet payload

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Emotet family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks