2018-09-19 - DATA DUMP (HANCITOR, NYMAIM, TRICKBOT)

HANCITOR MALSPAM INFECTION WITH ZEUS PANDA BANKER:

• 2018-09-19-Hancitor-malspam-10-email-examples.zip   21 kB (20,757 bytes)
• 2018-09-19-Hancitor-malspam-infection-traffic.pcap.zip   432 kB (431,591 bytes)
• 2018-09-19-Hancitor-infection-artifacts.zip   328 kB (328,398 bytes)

MALSPAM --> PASSWORD-PROTECTED WORD ATTACHMENT --> NYMAIM:

• 2018-09-18-malspam-with-password-protected-Word-doc-1248-UTC.eml.zip   33 kB (32,602 bytes)
• 2018-09-19-password-protected-Word-doc-sends-Nymaim.pcap.zip   6.2 MB (6,172,996 bytes)
• 2018-09-19-malware-and-artifacts-from-password-protected-Word-doc-sending-Nymaim.zip   3.1 MB (3,071,042 bytes)

TRICKBOT MALSPAM INFECTION:

• 2018-09-19-Trickbot-malspam-1639-UTC.eml.zip   35 kB (34,679 bytes)
• 2018-09-19-Trickbot-infection-traffic-ser0919us.pcap.zip   2.8 MB (2,838,205 bytes)
• 2018-09-19-Trickbot-malware-and-artifacts.zip   532 kB (532,146 bytes)

NOTES:

• Zip archives are password-protected with the standard password.  If you don't know it, look at the "about" page of this website.

 

Click here to return to the main page.