Live Stream VOD: New Emotet x64 Config Extractor and Yara Rule (Patreon)

Published:

2022-05-05 04:58:47

Imported:

2022-12

Content

In this twitch stream we take a look at the new 64-bit version of Emotet. We use dumpulator and python to extract the config and write a simple Yara rule.

Sample:

b481ac05ea9a59eedf6233166327057279babef26c913a8e89536472b192e86c

Sample Unpacked:

ed2640be5ed0a4486ecf7ac97b125e26b9d263624251eae1c9a42e9998ca1e68

Lab Notes (with code and Yara rule):

Emotet 64-bit Notes

Files

Live Stream VOD: New Emotet x64 Config Extractor and Yara Rule

This is "Live Stream VOD: New Emotet x64 Config Extractor and Yara Rule" by OALABS on Vimeo, the home for high quality videos and the people who love them.