Re: [clamav-users] Anyone have a good script for encrypted zip Emotet files?

2020-09-22 Thread G.W. Haywood via clamav-users
Hi there, On Tue, 22 Sep 2020, eric-l...@truenet.com wrote: I started writing my own, but of course I'm not catching them all. If you could let me have some samples (complete messages) I could take a look to see what I can do with my milter. If you agree I'd let you have a private mail addre

[clamav-users] Anyone have a good script for encrypted zip Emotet files?

2020-09-22 Thread eric-list
I started writing my own, but of course I'm not catching them all. Example of my YARA file is here: https://pastebin.com/MKTbKiNX If anyone is willing to share a more comprehensive rule I would appreciate it. Sincerely, Eric Tykwinski TrueNet, Inc. P: 610-429-8300 __