Extracted

• • Target
    3d43cf52327d8804c8d141c406fa26ea
  • Size 113KB
  • SHA256 fb59d08c1c00da6e08768d759d984922ef2726cade6ed27fe5713a79e7b7022e
  • MD5 3d43cf52327d8804c8d141c406fa26ea
  • SHA1 8cf1491e429fab3a38849c897d54a94553c5266a
  • SHA512 a7c6aed9544d82b5311072cd1102076c165a9df2a04e097820f63765a9e1ad9095812471041ff718578727007d91b34f4c0e67622315aa3b47d79b4896f6d572
  • MD5 SHA1 SHA512

  Score

  10^/10

  emotetbankersuricatatrojan

  • Emotet

    Emotet is a trojan that is primarily spread through spam emails.

    trojanbankeremotet

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata: ET MALWARE W32/Emotet CnC Beacon 3

    suricata

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2