2017-10-19 - PCAP/MALWARE FOR AN ISC DIARY (NECURS BOTNET MALSPAM USES DDE ATTACK)

NOTES:

• The associated ISC diary is for Thursday 2017-10-19:  Necurs Botnet malspam pushes Locky using DDE attack
• Zip files are password-protected.  If you don't know the password, look at the "about" page of this website.

 

ASSOCIATED FILES:

• Zip archive of the pcap:  2017-10-19-Necurs-Botnet-malspam-pushing-Locky.pcap.zip   774 kB (774,497 bytes)

• 2017-10-19-Necurs-Botnet-malspam-pushing-Locky.pcap   (835,326 bytes)

• Zip archive of the malware:  2017-10-19-Necurs-Botnet-malspam-and-artifacts.zip   616 kB (616,096 bytes)

• 2017-10-19-1st-stage-malware-during-Necurs-Botnet-malspam-infection.exe   (116,482 bytes)
• 2017-10-19-Locky-ransomware.exe   (651,264 bytes)
• 2017-10-19-Necurs-Botnet-malspam-1028-UTC.txt   (19,037 bytes)
• 2017-10-19-Necurs-Botnet-malspam-1102-UTC.txt   (19,071 bytes)
• 2017-10-19-Necurs-Botnet-malspam-1212-UTC.txt   (19,068 bytes)
• i_080668.doc   (13,345 bytes)
• i_134894.doc   (13,341 bytes)
• i_959146.doc   (13,344 bytes)

 

Click here to return to the main page.