2017-10-19 - PCAP/MALWARE FOR AN ISC DIARY (NECURS BOTNET MALSPAM USES DDE ATTACK)
NOTES:
- The associated ISC diary is for Thursday 2017-10-19: Necurs Botnet malspam pushes Locky using DDE attack
- Zip files are password-protected. If you don't know the password, look at the "about" page of this website.
ASSOCIATED FILES:
- Zip archive of the pcap: 2017-10-19-Necurs-Botnet-malspam-pushing-Locky.pcap.zip 774 kB (774,497 bytes)
- 2017-10-19-Necurs-Botnet-malspam-pushing-Locky.pcap (835,326 bytes)
- Zip archive of the malware: 2017-10-19-Necurs-Botnet-malspam-and-artifacts.zip 616 kB (616,096 bytes)
- 2017-10-19-1st-stage-malware-during-Necurs-Botnet-malspam-infection.exe (116,482 bytes)
- 2017-10-19-Locky-ransomware.exe (651,264 bytes)
- 2017-10-19-Necurs-Botnet-malspam-1028-UTC.txt (19,037 bytes)
- 2017-10-19-Necurs-Botnet-malspam-1102-UTC.txt (19,071 bytes)
- 2017-10-19-Necurs-Botnet-malspam-1212-UTC.txt (19,068 bytes)
- i_080668.doc (13,345 bytes)
- i_134894.doc (13,341 bytes)
- i_959146.doc (13,344 bytes)
Click here to return to the main page.