2019-12-11 - SPELEVO EK SENDS PSIXBOT

ASSOCIATED FILES:

• 2019-12-11-Spelevo-EK-sends-PsiXBot-IOCs.txt.zip   0.8 kB (780 bytes)
• 2019-12-11-Spelevo-EK-sends-PsiXBot-pcap-and-saz.zip   7.6 MB (7,588,579 bytes)
• 2019-12-11-Spelevo-EK-and-PsiXBot-artifacts.zip   79 kB (79,391 bytes)

NOTES:

• You can find some relatively up-to-date information about PsiXBot from this Proofpoint blog post.
• Zip archives are password-protected with the standard password.  If you don't know it, see the "about" page of this website.

 

IMAGES

Shown above:  Traffic from the infection filtered in Wireshark.

 

Shown above:  Traffic caused by PsiXBot shown in Telerik Fiddler.

 

Click here to return to the main page.