Emotet: New Delivery Mechanism to Bypass VBA Protection
Tags
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Python - T1059.006 Regsvr32 - T1218.010 Windows Service - T1543.003 Tool - T1588.002 Powershell - T1086 Regsvr32 - T1117
Show in Graph
Common Information
Type Value
UUID faee4ae5-5b97-4894-888f-add19ffcbe2c
Fingerprint a6400861a5b70796
Analysis status DONE
Considered CTI value 0
Text language
Published May 6, 2022, 9:22 p.m.
Added to db Sept. 11, 2022, 12:39 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Emotet: New Delivery Mechanism to Bypass VBA Protection
Title Emotet: New Delivery Mechanism to Bypass VBA Protection
Detected Hints/Tags/Attributes 37/1/3
Source URLs
Redirection Url
Details Source https://www.netskope.com/blog/emotet-new-delivery-mechanism-to-bypass-vba-protection
URL Provider
Details Provider Source level domain
Details netskope.com www.netskope.com
Attributes
Details Type #Events CTI Value
Details Domain 27 
gen.malware.detect.by
Details File 459 
regsvr32.exe
Details File 3 
y.dll