Extracted

• • Target
    emotet_e3_e34e5f0797877e5201202c222ea1e3821baee179e42b02c7fbe1885f5ca3356c_2020-08-13__180206._doc
  • Size 231KB
  • SHA256 e34e5f0797877e5201202c222ea1e3821baee179e42b02c7fbe1885f5ca3356c
  • MD5 fb08c256b818d5812ab8aa1c6be01605
  • SHA1 71da8e1506cf4d870d4d739550705c0c89760856
  • SHA512 2a235fca34a9f1b9fe421347a65b026168c5feff2fa0d7cd3661db9281fbaeb10fa323444dfe024e69de09e18149a4f35543c10a573356dc87d938eaa7853f0c
  • MD5 SHA1 SHA512

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blacklisted process makes network request

  • Executes dropped EXE

  • Loads dropped DLL

  • JavaScript code in executable

  • Drops file in System32 directory

  behavioral1behavioral2