Overview

overview

10

Static

static

3

dhl_paket_...15.exe

windows7-x64

10

dhl_paket_...15.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    deaf7e18f97c6653bab74b193b53bab7_JaffaCakes118

  • Size

    126KB

  • Sample

    241210-1zy8tawpbn

  • MD5

    deaf7e18f97c6653bab74b193b53bab7

  • SHA1

    5e75812198e0f14bb7e6419b99404158b90e4613

  • SHA256

    02db230ff2c9da862a55be29ca5906acf421979359f85367a994211a6dd58c29

  • SHA512

    7de324c7e48079bf306675de8a6d6e502328c2a6d27740376e55f6dfdd0000497c29d93788d3c8b650f35fd399ae905e9e96f2f4176b8d7346f2a48913603d94

  • SSDEEP

    3072:rRNTX5SGuscGGCUyJebwghLMCOj4FT0dX5SsO3K:XoGDRUyJEwgyv9bOa

Score
10/10
emotetbankerdiscoverytrojan

Malware Config

Targets

    • Target

      dhl_paket_085542066396884__ID__640128618981378GJG___HZ_L__G05_06_2015___SCT07_17_15.exe

    • Size

      188KB

    • MD5

      c3dd665a7938d4483a9f5bdae69183bf

    • SHA1

      5d968a8db0c800328fd372e02c4fe00a568ccba4

    • SHA256

      572561ac419cac3aab3c14e2a9c97452d74f2d068e377622a6af2c7ce83a1650

    • SHA512

      21a2ca0037f18d73f7290579cce5ebf0f58e4c5f3f6d300e5f2905749523bb14a752cb9ec8755c7287eeee0b1cd3b75d75069a1ef979168e52e08c6625e8e77a

    • SSDEEP

      3072:Ipe/rgTsjXUmVAi60q6z+7FtcGGCUyJebaghLMCOj4FT0weiwWhw1gb:2eMcfo0q8+ZtRUyJEagyv9weiwWhw10

    Score
    10/10
    emotetbankerdiscoverytrojan

    • Detect Emotet payload

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Emotet family

      emotet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks