2016-10-14 - PCAP AND MALWARE FOR AN ISC DIARY

NOTES:

• The associated ISC diary is for Friday 2016-10-14:  pseudoDarkleech Rig EK
• ZIP files are password-protected with the standard password.  If you don't know it, look at the "about" page of this website.

 

ASSOCIATED FILES:

• ZIP archive of the pcaps:  2016-10-14-pseudoDarkleech-Rig-EK-sends-Cerber-ransomware.pcap.zip   590.5 kB (590,493 bytes)

• 2016-10-14-pseudoDarkleech-Rig-EK-sends-Cerber-ransomware.pcap   (716,985 bytes)

• ZIP archive of the malware:  2016-10-14-pseudoDarkleech-Rig-EK-sends-Cerber-malware-and-artifacts.zip   770.0 kB (770,046 bytes)

• 2016-10-14-Cerber-ransomware-decryption-instructions-README.hta   (63,059 bytes)
• 2016-10-14-Cerber-ransomware-decryption-instructions.bmp   (1,920,054 bytes)
• 2016-10-14-page-from-joellipman.com-with-injected-script.txt   (68,256 bytes)
• 2016-10-14-pseudoDarkleech-Rig-EK-flash-exploit.swf   (50,368 bytes)
• 2016-10-14-pseudoDarkleech-Rig-EK-landing-page.txt   (30,204 bytes)
• 2016-10-14-pseudoDarkleech-Rig-EK-payload-Cerber-ransomware.exe   (481,175 bytes)

 

Click here to return to the main page.