Live Stream VOD: New Emotet x64 Config Extractor and Yara Rule
Added 2022-05-05 04:58:47 +0000 UTCIn this twitch stream we take a look at the new 64-bit version of Emotet. We use dumpulator and python to extract the config and write a simple Yara rule.
Sample:
b481ac05ea9a59eedf6233166327057279babef26c913a8e89536472b192e86c
Sample Unpacked:
ed2640be5ed0a4486ecf7ac97b125e26b9d263624251eae1c9a42e9998ca1e68
Lab Notes (with code and Yara rule):
