Cleaning up after Emotet: the law enforcement file
The current sample sends a request to one of the sinkholed servers. Content: L”DNT: 0rnReferer: 80.158.3.161/i8funy5rv04bwu1a/rnContent-Type: multipart/form-data; boundary=——̵…
blog.malwarebytes.com