[Trend]New EMOTET Hijacks a Windows API, Evades Sandbox and Analysis

[igor51]

New EMOTET Hijacks a Windows API, Evades Sandbox and Analysis

We discussed the re-emergence of banking malware EMOTET in September and how it has adopted a wider scope since it wasn’t picky about the industries it attacks. We recently discovered that EMOTET has a new iteration (detected as TSPY_EMOTET.SMD10) with a few changes in its usual behavior and new routines that allow it to elude...

Post from: Trendlabs Security Intelligence Blog - by Trend Micro

New EMOTET Hijacks a Windows API, Evades Sandbox and Analysis

Source: New EMOTET Hijacks a Windows API, Evades Sandbox and Analysis