Emotet Loader Execution Via .LNK File — Detection Rule

Detects the Emotet Epoch4 loader as reported by @malware_traffic back in 2022. The ".lnk" file was delivered via phishing campaign.

Read the full analysis on IntelFusions