2021-01-13 (WEDNESDAY) - EMOTET EPOCH 2 INFECTION WITH TRICKBOT GTAG MOR13

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

ASSOCIATED FILES:

• 2021-01-13-IOCs-from-Emotet-epoch-2-with-Trickbot.txt.zip   2.3 kB   (2,342 bytes)

• 2021-01-13-IOCs-from-Emotet-epoch-2-with-Trickbot.txt   (4,487 bytes)

• 2021-01-13-Emotet-epoch-2-infection-traffic-with-Trickbot-gtag-mor13.pcap.zip   4.9 MB   (4,920,863 bytes)

• 2021-01-13-Emotet-epoch-2-infection-traffic-with-Trickbot-gtag-mor13.pcap   (5,532,241 bytes)

• 2021-01-13-email-malware-and-artifacts-from-infection.zip   733 kB   (733,288 bytes)

• 2021-01-12-Emotet-epoch-2-malspam-used-to-kick-off-infection.eml (222,109 bytes)
• 2021-01-13-registry-update-for-Emotet.txt (722 bytes)
• 2021-01-13-scheduled-task-for-Trickbot.txt (3,370 bytes)
• Form - Jan 13, 2021.doc (160,919 bytes)
• Trackless2656214810/ydcslo.exe (487,424 bytes)
• Trackless2656214810/launcher.bat (1,352 bytes)
• Trackless2656214810/SiteSecurityServiceState.txt (44,224 bytes)
• wdvexmex.cnf   (280,064 bytes)

 

Click here to return to the main page.