2022-03-14 (MONDAY) - EMOTET EPOCH 4 AND EPOCH 5 ACTIVITY

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

REFERENCE FOR EPOCH 5 INFECTION WITH COBALT STRIKE:

• https://twitter.com/Unit42_Intel/status/1503500488574222340

EPOCH 4 FILES:

• 2022-03-14-IOCs-from-Emotet-epoch4.txt.zip   1.8 kB   (1,807 bytes)
• 2022-03-14-Emotet-epoch4-malspam-6-examples.zip   322 kB   (322,428 bytes)
• 2022-03-14-Emotet-epoch4-attachments.zip   404 kB   (404,464 bytes)
• 2022-03-14-Emotet-epoch4-with-spambot-traffic.pcap.zip   8.8 MB   (8,819,898 bytes)
• 2022-03-14-Emotet-epoch4-malware.zip   367 kB   (367,290 bytes)

EPOCH 5 FILES WITH COBALT STRIKE:

• 2022-03-14-IOCs-from-Emotet-epoch5-with-Cobalt-Strike.txt.zip   2.3 kB   (2,302 bytes)
• 2022-03-14-Emotet-epoch5-malspam-6-examples.zip   453 kB   (452,572 bytes)
• 2022-03-14-Emotet-epoch5-attachments.zip   630 kB   (629,898 bytes)
• 2022-03-14-Emotet-epoch5-with-Cobalt-Strike-and-spambot-traffic.pcap.zip   10.6 MB   (10,558,977 bytes)
• 2022-03-14-Emotet-epoch5-and-Cobalt-Strike-binaries.zip   991 kB   (991,155 bytes)

 

Click here to return to the main page.