2017-12-13 - NECURS BOTNET MALSPAM EXAMPLES, 2017-12-07 THRU 12
ASSOCIATED FILES:
- Zip archive of the spreadsheet tracker: 2017-12-07-thru-12-Necurs-Botnet-malspam-tracker.csv.zip 2.1 kB (2,052 bytes)
- Zip archive of the malspam, malware, and artifacts: 2017-12-07-thru-12-Necurs-Botnet-malspam-and-malware.zip 5.3 MB (5,288,631 bytes)
- Zip archive of the pcaps: 2017-12-07-thru-13-Necurs-Botnet-malspam-pcaps.zip 4.8 MB (4,763,897 bytes)
NOTES:
- I collected a few samples of Necurs Botnet malspam from the past few days.
- The format on some of the messages was wrong, so I fixed those (as noted in the spreadsheet).
- Saw mostly Trickbot, but today (Wednesday 2017-12-13) I got GlobeImposter ransomware from an attachment from yesterday's wave of malpsam.
- Zip files are password-protected with the standard password. If you don't know it, look at the "about" page of this website.
Click here to return to the main page.