2018-01-23 - PCAP/MALWARE FOR AN ISC DIARY (HANCITOR MALSPAM)
NOTES:
- The associated ISC diary is for Wednesday 2018-01-24: RTF files for Hancitor utilize exploit for CVE-2017-11882
- Zip files are password-protected. If you don't know the password, look at the "about" page of this website.
ASSOCIATED FILES:
- Zip archive of the traffic: 2018-01-23-Hancitor-infection-traffic.pcap.zip 3.9 MB (3,863,911 bytes)
- Zip archive of the emails: 2018-01-23-Hancitor-malspam-30-emails.txt.zip 4.2 kB (4,154 bytes)
- Zip archive of the malware: 2018-01-23-Hancitor-infection-malware-and-artifacts.zip 1.8 MB (1,799,045 bytes)
Click here to return to the main page.