Extracted

• • Target
    58b606599b6d93a481f9e5185b1c8a69
  • Size 113KB
  • SHA256 b5207887a27a42330a6b8e863e0550008a6375de1f4c9c6c0edcc7a9bb6d548f
  • MD5 58b606599b6d93a481f9e5185b1c8a69
  • SHA1 6ffa8499c290b24e942b804e2668a2b4e903e59a
  • SHA512 fd82735ea087329ec03b4e37015c108f075969b06c76c8c0614ddc7a18f7c2c4089dcdcef51f828a3d9c703f973b395fdcd8f960757b868d3681c9d30a2d431f
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankertrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2