2017-08-15 - PCAP AND MALWARE FOR AN ISC DIARY (TRICKBOT MALSPAM)

NOTES:

• The associated ISC diary is for Tuesday 2017-08-15:  Malspam pushing Trickbot banking Trojan
• ZIP files are password-protected with the standard password.  If you don't know it, look at the "about" page of this website.

 

ASSOCIATED FILES:

• Zip archive of the email and malware:  Traffic-for-2017-08-15-ISC-diary-on-Trickbot-malspam.pcap.zip   2.1 MB (2,083,077 bytes)

• Traffic-for-2017-08-15-ISC-diary-on-Trickbot-malspam.pcap   (2,667,759 bytes)

• Zip archive of the malware:  Artifacts-and-malware-for-2017-08-15-ISC-diary-on-Trickbot-malspam.zip   725 kB (725,957 bytes)

• Bpfbe-1st-file.exe   (496,640 bytes)
• Bpfbe-2nd-file.exe   (358,845 bytes)
• Cqgcf.exe   (284,590 bytes)
• SecureDoc.doc   (47,616 bytes)
• SecureDoc.html.txt   (88 bytes)
• bmwaxb.bat.txt   (315 bytes)
• scheduled-task-services_update.xml.txt   (3,948 bytes)

 

Click here to return to the main page.