I have added a zipped pcap file for your analysis. The password for the zipped pcap is infected all lowercase.

PCAP file of the infection traffic:
2018-02-15-Emotet-Banking-Trojan-pcap.zip

ASSOCIATED DOMAINS AND IP ADDRESSES:

 

IMAGES AND DETAILS OF INFECTION CHAIN:

Shown above: Network traffic  associated with the Emotet Banking Trojan infection.

 

Shown above: Email with link to Macro Word Document to begin infection chain

 

Shown above: Macro Word Document leading to the download and installation of the Emotet Banking Trojan

 

MALICIOUS PAYLOAD ASSOCIATED WITH MALSPAM: