Malfam: Emotet | Detection.FYI

Attachment: Emotet heavily padded doc in zip file

Oct 4, 2023 · Malfam: Emotet ·
Share on:

Detects a potential Emotet delivery method using padded .doc files that compress into small zip files. Contents may include Red Dawn templates exceeding 500MB.

Read More
Attachment: LNK with embedded content

Aug 21, 2023 · Malfam: Emotet ·
Share on:

Emotet has been observed to embed executable content within an LNK file to deliver and execute VBScript when launched.

Similar research has demonstrated how this concept may be applied to deliver and launch an embedded executable via PowerShell.

Read More