2022-02-08 (TUESDAY) - FILES FOR AN ISC DIARY (EMOTET WITH COBALT STRIKE)

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

REFERENCE:

• https://isc.sans.edu/forums/diary/Example+of+Cobalt+Strike+from+Emotet+infection/28318/

EPOCH 4 FILES:

• 2022-02-08-Emotet-epoch4-notes.txt.zip   2.0 kB   (1,961 bytes)
• 2022-02-08-Emotet-epoch4-infection-start-and-spambot-traffic.pcap.zip   30.3 MB   (30,342,778 bytes)
• 2022-02-08-Emotet-epoch4-malspam-and-malware.zip   2.6 MB   (2,566,750 bytes)

EPOCH 5 FILES:

• 2022-02-08-Emotet-epoch5-notes.txt.zip   2.2 kB   (2,221 bytes)
• 2022-02-08-Emotet-epoch5-infection-part-1-start-and-spambot-traffic.pcap.zip   10.9 MB   (10,923,487 bytes)
• 2022-02-08-Emotet-epoch5-infection-part-2-with-Cobalt-Strike.pcap.zip   48.3 MB   (48,310,147 bytes)
• 2022-02-08-Emotet-epoch5-malspam-and-malware-with-Cobalt-Strike-sample.zip   3.1 MB   (3,115,191 bytes)

 

Click here to return to the main page.