2017-01-11 - PCAP AND MALWARE FOR AN ISC DIARY

NOTES:

• The associated ISC diary is for Wednesday 2017-01-11:  Hancitor/Pony/Vawtrak malspam
• ZIP files are password-protected with the standard password.  If you don't know it, look at the "about" page of this website.

 

ASSOCIATED FILES:

• ZIP archive of the pcap:  2017-01-10-Hancitor-Pony-Vawtrak-traffic.pcap.zip   727 kB (726,529 bytes)

• 2017-01-10-Hancitor-Pony-Vawtrak-traffic.pcap   (973,977 bytes)

• ZIP archive of the emails and malware:  2017-01-10-Hancitor-Pony-Vawtrak-malspam-and-artifacts.zip   402 kB (402,301 bytes)

• 2017-01-10-Hancitor-malspam-2016-UTC.eml   (775 bytes)
• 2017-01-10-Hancitor-malspam-2025-UTC.eml   (807 bytes)
• 2017-01-10-Pony-downloader.dll   (71,680 bytes)
• 2017-01-10-Vawtrak-malware.exe   (389,120 bytes)
• parking_bert.doc   (200,192 bytes)

 

Click here to return to the main page.