Emotet

Emotet is a trojan that is primarily spread through spam emails.

Process spawned unexpected child process

This typically indicates the parent process was compromised via an exploit or macro.

suricata: ET MALWARE ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex/Trickbot CnC)

suricata: ET MALWARE ABUSE.CH SSL Blacklist Malicious SSL certificate detected (Dridex/Trickbot CnC)

suricata: ET MALWARE W32/Emotet CnC Beacon 3

suricata: ET MALWARE W32/Emotet CnC Beacon 3

Blocklisted process makes network request

Downloads MZ/PE file