Skip to main content

Questions tagged [emotet]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2 votes
1 answer
314 views

How to decrypt Emotet's TLS traffic by MITMProxy

I have a question about Emotet's TLS traffic: Using MITMProxy, I have successfully decrypted TLS traffic with Emotet's C2 server and can read the contents of the traffic. https://mitmproxy.org ...
mokotan's user avatar
  • 21
2 votes
1 answer
564 views

Is running Powershell always as administrator a good practice?

I work as software engineer in a company. The IT deparment has decided to forbid powershell execution from our computers as part of the actions they are implementing to avoid Emotet malware. As ...
joanlofe's user avatar
  • 131
1 vote
0 answers
123 views

How does the Emotet trojan activates its remote copies?

The Emotet trojan is active again and I read a bit about how it propagates. This includes phishing and having users launch all kind of files (exes, fiels with macros, ...) - a typical method. It also ...
WoJ's user avatar
  • 9,096
2 votes
1 answer
484 views

How does the Emotet malware work?

I was searching this site for questions on Emotet and I was kind of baffled when nothing was on here. So the title is kind of self explanatory. See this question as an attempt to "complete" the ...
Tom K.'s user avatar
  • 8,021