2019-12-10 - DATA DUMP: HANCITOR INFECTION WITH GOZI/ISFB (URSNIF) AND COBALT STRIKE

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

ASSOCIATED FILES:

• 2019-12-10-Hancitor-malspam-1815-UTC.eml.zip   4.3 kB (4,267 bytes)
• 2019-12-10-Hancitor-infection-with-Ursnif-and-Cobalt-Strike.pcap.zip   1.4 kB (1,360,739 bytes)
• 2019-12-10-artifacts-and-malware-from-Hancitor-infection.zip   3.5 kB (3,452,353 bytes)

 

Click here to return to the main page.