2020-07-10 - TRICKBOT GTAG CHIL65 INFECTION

ASSOCIATED FILES:

NOTE:

 

IMAGES


Shown above:  Screenshot from the Excel spreadsheet I used for this infection.

 


Shown above:  Initial location the Trickbot DLL was saved to.

 


Shown above:  Trickbot persistent through a scheduled task.

 


Shown above:  Traffic from the infection filtered in Wireshark.

 

Click here to return to the main page.