hightestEmerging Threat
Emotet Loader Execution Via .LNK File
Detects the Emotet Epoch4 loader as reported by @malware_traffic back in 2022. The ".lnk" file was delivered via phishing campaign.
windowsprocess_creation
2024-08-15
Emerging Threats
Malware2022, 2020, 2019
Emotet
3Rules
10References
3Folders
2024-08-15Latest
Summary
Emotet is tracked here as a malware family or toolset with 3 Sigma detections spanning 2022, 2020, 2019. Coverage centers on windows / process_creation.
Related Detections
Search this threatcriticaltestEmerging Threat
Potential Emotet Rundll32 Execution
Detecting Emotet DLL loading by looking for rundll32.exe processes with command lines ending in ,RunDLL or ,Control_RunDLL
windowsprocess_creation
2023-02-21
highstableEmerging Threat
Potential Emotet Activity
Detects all Emotet like process executions that are not covered by the more generic rules
windowsprocess_creation
2023-02-04
References