Overview

overview

10

Static

static

3

Status_DHL...15.exe

windows7-x64

10

Status_DHL...15.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b10dad576a801559cce292340cc7350a_JaffaCakes118

  • Size

    103KB

  • Sample

    241129-n1vksstmhw

  • MD5

    b10dad576a801559cce292340cc7350a

  • SHA1

    23a3b2bef419276f212ca3c624183493e5fc7604

  • SHA256

    8602daa39ec1a943d40aae65ab65cff7124d455725de4e038057f7ba63cf1a63

  • SHA512

    09fe52a9117a6d4c1bbdf7c04a559e945559c06b41e6bf5301b35401e068d41819084bcb99717a58197dcb0bfdc57ed6cf69ab01f1d1553dbe96a1cc2e557460

  • SSDEEP

    3072:cgxbbWiSS0IewMZxYy0SIsNdNbCSe6Q6qU:cgNb130IxMZbfIQbCSZQvU

Score
10/10
emotetbankerdiscoverytrojan

Malware Config

Targets

    • Target

      Status_DHL_Sendungsverfolgung__29__04__2015___nolp_dhl_lang___De___900394984948_Message_ID0_2015.exe

    • Size

      128KB

    • MD5

      328d7b86e3704637ef668400703ed2e3

    • SHA1

      30ba1297d94b0043145be4081cc37fb2adf9e35d

    • SHA256

      12117a9feabc8dc5196d7dc3cf257136401b8ed6ba2c44ffb87a6fbb6eca33d3

    • SHA512

      ca1417b38ecc8fb704dafe1f713e2a54ec22dd973a0ac4fd86742bb567122027d8c46182323a7b92e440b6bebdb0fda2d2654e907fc0a5b898013da1e1d3c33e

    • SSDEEP

      3072:4JVdb2IXAr54CS0IewMZx1udPMK3nwb292x7MI7:8rb2Iws0IxMZPulXwbme7M

    Score
    10/10
    emotetbankerdiscoverytrojan

    • Detect Emotet payload

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet family

      emotet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks