Overview

overview

10

Static

static

3

dhl_paket_...15.exe

windows7-x64

10

dhl_paket_...15.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c498c0aab71c985cc036790aedf8c8fe_JaffaCakes118

  • Size

    126KB

  • Sample

    241204-13w8matnew

  • MD5

    c498c0aab71c985cc036790aedf8c8fe

  • SHA1

    0a24647cfde2d07f3282e83ec74e2cda6f2293ac

  • SHA256

    857c1b671b83f51af7433be2fc39fda2a96129587f88904125b509be561c409c

  • SHA512

    c028d0ee89f9b2ee663c7c278cd3ad6f4da5653f70f08cb5ec692aac1b81b73c1adfb07eb8a0832503ff967568a37b5092b5d92d4dc523e4408cbba8cf1741a4

  • SSDEEP

    3072:cRNTX5SGuscGGCUyJebwghLMCOj4FT0dX5SsO35:qoGDRUyJEwgyv9bOp

Score
10/10
emotetbankerdiscoverytrojan

Malware Config

Targets

    • Target

      dhl_paket_722260990773641__ID__003099714391138ACL___GA_H__L05_06_2015___MZP07_17_15.exe

    • Size

      188KB

    • MD5

      c3dd665a7938d4483a9f5bdae69183bf

    • SHA1

      5d968a8db0c800328fd372e02c4fe00a568ccba4

    • SHA256

      572561ac419cac3aab3c14e2a9c97452d74f2d068e377622a6af2c7ce83a1650

    • SHA512

      21a2ca0037f18d73f7290579cce5ebf0f58e4c5f3f6d300e5f2905749523bb14a752cb9ec8755c7287eeee0b1cd3b75d75069a1ef979168e52e08c6625e8e77a

    • SSDEEP

      3072:Ipe/rgTsjXUmVAi60q6z+7FtcGGCUyJebaghLMCOj4FT0weiwWhw1gb:2eMcfo0q8+ZtRUyJEagyv9weiwWhw10

    Score
    10/10
    emotetbankerdiscoverytrojan

    • Detect Emotet payload

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet family

      emotet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks