2017-01-09 - PCAP AND MALWARE FOR AN ISC DIARY

NOTES:

• The associated ISC diary is for Monday 2017-01-09:  Merry X-Mas ransomware from Sunday 2017-01-08
• ZIP files are password-protected with the standard password.  If you don't know it, look at the "about" page of this website.

 

ASSOCIATED FILES:

• ZIP archive of the pcap:  2017-01-08-merry-xmas-ransomware-traffic.pcap.zip   172 kB (171,995 bytes)

• 2017-01-08-merry-xmas-ransomware-traffic.pcap   (238,777 bytes)

• ZIP archive of the emails and malware:  2017-01-08-merry-xmas-ransomware-email-and-malware.zip   238 kB (237,9433 bytes)

• 2017-01-08-malspam-1539-UTC.eml   (1,639 bytes)
• 2017-01-08-malspam-1540-UTC.eml   (1,638 bytes)
• PlaintNote_12545_copy.doc   (48,640 bytes)
• PlaintNote_12545_copy.zip   (18,314 bytes)
• Roaming.eXe   (210,368 bytes)
• YOUR_FILES_ARE_DEAD.HTA   (65,913 bytes)

 

Click here to return to the main page.