Max_Malyutin on Twitter: "The undead #Emotet is here🚨 TTPs: [+] Auto_Open + XLM4.0 macro [+] New lure template - abuse Trusted Location (T1137.001)🔥 [+] Regsvr32 exec x4 DLL [+] Copy to a new location [+] Run key persistence (T1547.001) [+] Initial discovery - systeminfo (T1082) & ipconfig (T1016) https://t.co/dbDpMwN77z" / Twitter
https://twitter.com/Max_Mal_/status/1587948482521976832?s=20