Overview

overview

10

Static

static

3

dhl_paket_...15.exe

windows7-x64

10

dhl_paket_...15.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9fc5e167ef69e6d12f5d370294dd59b_JaffaCakes118

  • Size

    126KB

  • Sample

    241127-2t5zvazqcl

  • MD5

    a9fc5e167ef69e6d12f5d370294dd59b

  • SHA1

    ba1cf1ff4b4a42edb2da9f4d5ce8bef41a1478ba

  • SHA256

    7b8867e73f9ce1eee25bbe4dee57a1aaa675b031bd5ea88c3f59536cdb4085d9

  • SHA512

    890cfed589509e31a323a5be374a780d899b52f367f392003654bbe878ccf3197a4d202d5a14ef5f3e03d4b63e7d607bf5bedf3e639c1ceb6f321737a93afe76

  • SSDEEP

    3072:aWFnm78Un+Safqa5zjM9qH34bk4xM8Ee6DFMe6efGYZAQ:aWFmALpzQ9qH3Qko9x62e6ho

Score
10/10
emotetbankerdiscoverytrojan

Malware Config

Targets

    • Target

      dhl_paket_995411302641991__ID__472373355883106HZO___GG_H__L05_06_2015___LCH07_17_15.exe

    • Size

      188KB

    • MD5

      6cef1b3abfb99254cb67118381c33822

    • SHA1

      25f43623eba83aa33d85016bb1d94e09ae635d83

    • SHA256

      d742d24cc4a615bdfc5b5546153bcd565a6ccafe313b04da80bca6e09100841b

    • SHA512

      9a31fbd727c55cc69e53281069d26f65127ccd69cab20cc0d716f42bbaf2308ed970fa39a14f52852dbc53d5c00459ef2e9f7c75b607a880a8679f8cf537c761

    • SSDEEP

      3072:Ipe/rgTsjXUmVAi60q81F4zjM9qH34bk4xM8ie6DFMe6MbDw1gb:2eMcfo0qqF4zQ9qH3Qko9D62e6KDw10

    Score
    10/10
    emotetbankerdiscoverytrojan

    • Detect Emotet payload

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet family

      emotet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks