2021-01-12 (TUESDAY) - EMOTET EPOCH 3 INFECTION WITH TRICKBOT GTAG MOR12 AND SPAMBOT TRAFFIC

NOTES:

• Zip files are password-protected.  If you don't know the password, see the "about" page of this website.

ASSOCIATED FILES:

• 2021-01-12-example-of-Emotet-epoch-3-malspam.eml.zip   73.4 kB   (73,417 bytes)

• 2021-01-12-example-of-Emotet-epoch-3-malspam.eml   (97,865 bytes)

• 2021-01-12-Emotet-epoch-3-with-Trickbot-mor12-and-spambot-traffic-3-parts.zip   34.0 MB   (33,984,018 bytes)

• 2021-01-12-part-1-Emotet-epoch-3-with-Trickbot-mor12-and-spambot-traffic.pcap   (9,351,030 bytes)
• 2021-01-12-part-2-Emotet-epoch-3-malspam-example-from-spambot-traffic.pcap   (106,564 bytes)
• 2021-01-12-part-3-Emotet-epoch-3-with-spambot-traffic-and-tiny-bit-of-Trickbot-C2.pcap   (29,197,032 bytes)

• 2021-01-12-malware-from-Emotet-and-Trickbot.zip   533 kB   (532,881 bytes)

• 2021-01-12-registry-update-for-Emotet.txt   (684 bytes)
• 2021-01-12-scheduled-task-for-Trickbot.txt   (3,364 bytes)
• Trackless3311313539/kwcqgsatnmwpys.exe   (499,712 bytes)
• Trackless3311313539/launcher.bat   (1,367 bytes)
• Trackless3311313539/SiteSecurityServiceState.txt   (69,768 bytes)
• zhyla.htn   (344,920 bytes)

 

Click here to return to the main page.