2019-11-25 - EMOTET EPOCH 3 INFECTION WITH TRICKBOT GTAG MOR51

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

ASSOCIATED FILES:

• 2019-11-25-Emotet-epoch-3-infection-with-Trickbot-gtag-mor51-IOCs.txt.zip   1.6 kB (1,602 bytes)
• 2019-11-25-Emotet-malspam-example.eml.zip   151 kB (150,582 bytes)
• 2019-11-25-Emotet-epoch-3-infection-with-Trickbot-gtag-mor51.pcap.zip   15.1 MB (15,118,905 bytes)
• 2019-11-25-malware-and-artifacts-from-Emotet-and-Trickbot.zip   13.2 MB (13,204,777 bytes)

 

IMAGES

Shown above:  Screenshot of the Emotet malspam used to kick off today#s infection.

 

Shown above:  Traffic from the infection filtered in Wireshark.

 

Click here to return to the main page.