2019-06-24 - PCAP AND MALWARE FOR AN ISC DIARY (RIG EK SENDS PITOU.B)

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

REFERENCE:

• The associated ISC diary is Rig Exploit Kit sends Pitou.B Trojan.

ASSOCIATED FILES:

• 2019-06-24-Rig-EK-and-post-infection-traffic.pcap.zip   953 kB (952,562 bytes)

• 2019-06-24-Rig-EK-and-post-infection-traffic.pcap   (1,043,683 bytes)

• 2019-06-24-Any.Run-analysis-of-Pitou.B-sample.pcap.zip   13.5 kB (13,468 bytes)

• 2019-06-24-Any.Run-analysis-of-Pitou.B-sample.pcap   (90,823 bytes)

• 2019-06-24-malware-and-artifacts-from-Rig-EK-infection.zip   635 kB (635,084 bytes)

• 2019-06-24-Rig-EK-artifact-T.t.txt   (1,149 bytes)
• 2019-06-24-Rig-EK-flash-exploit.swf   (9,203 bytes)
• 2019-06-24-Rig-EK-landing-page.txt   (136,740 bytes)
• 2019-06-24-Rig-EK-payload.exe   (827,904 bytes)

 

Click here to return to the main page.