2018-01-23 - PCAP/MALWARE FOR AN ISC DIARY (HANCITOR MALSPAM)

NOTES:

• The associated ISC diary is for Wednesday 2018-01-24:  RTF files for Hancitor utilize exploit for CVE-2017-11882
• Zip files are password-protected.  If you don't know the password, look at the "about" page of this website.

 

ASSOCIATED FILES:

• Zip archive of the traffic:  2018-01-23-Hancitor-infection-traffic.pcap.zip   3.9 MB (3,863,911 bytes)
• Zip archive of the emails:  2018-01-23-Hancitor-malspam-30-emails.txt.zip   4.2 kB (4,154 bytes)
• Zip archive of the malware:  2018-01-23-Hancitor-infection-malware-and-artifacts.zip   1.8 MB (1,799,045 bytes)

 

Click here to return to the main page.