Extracted

• • Target
    emotet_e2_c8a48cd16e560bb22ad74fe50ff278db8d542241f7ee298dfb9a902614537a3c_2020-10-29__233507344877._doc
  • Size 241KB
  • SHA256 c8a48cd16e560bb22ad74fe50ff278db8d542241f7ee298dfb9a902614537a3c
  • MD5 fd1bd6ea445bb37ee2af7c159d018335
  • SHA1 c4629330afd76d527d25444bea1f19d5304a0fd7
  • SHA512 233d03cf54aca5aa8df157df4a789d72af48043b77d92ad5f61aaf1714e6a00562a82c173888e6e67ebaf00147c8160eb51da08a7eec5d0fd33dc761f0b1c2c3
  • MD5 SHA1 SHA512

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blacklisted process makes network request

  • Drops file in System32 directory

  behavioral1behavioral2