2017-12-13 - NECURS BOTNET MALSPAM EXAMPLES, 2017-12-07 THRU 12

ASSOCIATED FILES:

• Zip archive of the spreadsheet tracker:  2017-12-07-thru-12-Necurs-Botnet-malspam-tracker.csv.zip   2.1 kB (2,052 bytes)
• Zip archive of the malspam, malware, and artifacts:  2017-12-07-thru-12-Necurs-Botnet-malspam-and-malware.zip   5.3 MB (5,288,631 bytes)
• Zip archive of the pcaps:  2017-12-07-thru-13-Necurs-Botnet-malspam-pcaps.zip   4.8 MB (4,763,897 bytes)

NOTES:

• I collected a few samples of Necurs Botnet malspam from the past few days.
• The format on some of the messages was wrong, so I fixed those (as noted in the spreadsheet).
• Saw mostly Trickbot, but today (Wednesday 2017-12-13) I got GlobeImposter ransomware from an attachment from yesterday's wave of malpsam.
• Zip files are password-protected with the standard password.  If you don't know it, look at the "about" page of this website.

 

Click here to return to the main page.