Emotet,misp-galaxy:mitre-attack-pattern="Spearphishing Attachment - T1193",misp-galaxy:mitre-attack-pattern="Command-Line Interface - T1059",misp-galaxy:mitre-attack-pattern="Scheduled Task - T1053",misp-galaxy:mitre-attack-pattern="Scripting - T1064",misp-galaxy:mitre-attack-pattern="Windows Management Instrumentation - T1047",misp-galaxy:mitre-attack-pattern="Registry Run Keys / Startup Folder - T1060",misp-galaxy:mitre-attack-pattern="Process Injection - T1055",misp-galaxy:mitre-attack-pattern="Account Discovery - T1087",misp-galaxy:mitre-attack-pattern="Domain Trust Discovery - T1482",misp-galaxy:mitre-attack-pattern="System Owner/User Discovery - T1033",misp-galaxy:mitre-attack-pattern="Commonly Used Port - T1043",misp-galaxy:mitre-attack-pattern="Standard Application Layer Protocol - T1071",misp-galaxy:mitre-attack-pattern="Standard Cryptographic Protocol - T1032",misp-galaxy:mitre-tool="Empire - S0363",misp-galaxy:tool="Emotet",misp-galaxy:mitre-tool="Cobalt Strike - S0154",misp-galaxy:mitre-attack-pattern="PowerShell - T1086",misp-galaxy:mitre-attack-pattern="New Service - T1050",type:OSINT,osint:lifetime="perpetual",osint:certainty="50",tlp:white