2020-07-20 - DATA DUMP: EMOTET INFECTION WITH TRICKBOT

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

ASSOCIATED FILES:

• 2020-07-20-Emotet-malspam-14-examples.zip   357 kB (357,423 bytes)
• 2020-07-20-Emotet-epoch-1-infection-with-Trickbot-gtag-mor113.pcap.zip   3.5 MB (3,502,396 bytes)
• 2020-07-20-malware-and-artifacts-from-Emotet-with-Trickbot-infection.zip   724 kB (724,141 bytes)

 

IMAGES

Shown above:  Traffic from an infection filtered on Wireshark.

 

Shown above:  Emotet and Trickbot on the infected Windows 10 host.

 

Shown above:  Trickbot persistent on the infected Windows 10 host.

 

Click here to return to the main page.