SOC109 EventID:85 — Emotet Malware Detected — letsdefend.io

SOC109 EventID:85 — Emotet Malware Detected — letsdefend.io

In this article we continue where we left off with letsdefend.io alert solutions, with Event ID 85: Emotet Malware Detected.

Let’s start with alert information.

EventID :85
Event Time :Mar, 22, 2021, 09:06 PM
Rule :SOC109 - Emotet Malware Detected
Level :Security Analyst
Source Address :172.16.17.45
Source Hostname :RichardPRD
File Name :1word.doc
File Hash :349d13ca99ab03869548d75b99e5a1d0
File Size :188.95 Kb
Device Action :Cleaned

The alert indicates the detection of the Emotet malware on …

address alert article blue team continue cybersecurity emotet event hash incident response information letsdefendio malware name security soc solutions start