2020-06-09 - PCAP AND MALWARE FOR AN ISC DIARY (ZLOADER)
NOTES:
- The ISC diary is for Wednesday 2020-06-10: Job application-themed malspam pushes ZLoader
- Zip files are password-protected. If you don't know the password, look at the "about" page of this website.
ASSOCIATED FILES:
- 2020-05-13-thru-06-05-CV-malspam-7-examples.zip 2.0 MB   (2,006,687 bytes)
- 2020-05-13-CV-malspam-1750-UTC.eml   (485,866 bytes)
- 2020-05-22-CV-malspam-1705-UTC.eml   (472,190 bytes)
- 2020-06-03-CV-malspam-1638-UTC.eml   (399,589 bytes)
- 2020-06-04-CV-malspam-1904-UTC.eml   (394,685 bytes)
- 2020-06-04-CV-malspam-2139-UTC.eml   (399,458 bytes)
- 2020-06-05-CV-malspam-1806-UTC.eml   (402,198 bytes)
- 2020-06-05-CV-malspam-1958-UTC.eml   (399,590 bytes)
- 2020-05-13-thru-06-05-XLS-attachments-from-malspam.zip 1.9 MB   (1,906,127 bytes)
- Fiona CV.xls   (353792 bytes)
- Jonna Mieles CV.xls   (296448 bytes)
- Lanelle Sigler CV.xls   (294400 bytes)
- Lavone Slaymaker CV.xls   (348160 bytes)
- Louanne Polite CV 1-of-2.xls   (290816 bytes)
- Louanne Polite CV 2-of-2.xls   (294400 bytes)
- Woodrow Swiney CV.xls   (294400 bytes)
- 2020-06-09-ZLoader-infection-traffic.pcap.zip 5.9 MB   (5,864,722 bytes)
- 2020-06-09-ZLoader-infection-traffic.pcap   (6,486,687 bytes)
- 2020-06-09-ZLoader-malware-and-artifacts.zip 5.4 MB   (5,412,383 bytes)
- 2020-06-09-registry-update-to-keep-ZLoader-persistent.txt   (311 bytes)
- Users/username/AppData/Local/Temp/isen.dll   (503,296 bytes)
- Users/username/AppData/Roaming/Meul/
- Users/username/AppData/Roaming/Kiwo/ruaxuk.ekaf   (241,649 bytes)
- Users/username/AppData/Roaming/Piyfoq/egquivig.dy   (276,089 bytes)
- Users/username/AppData/Roaming/Ehpalu/dyluykg.zue   (973,999 bytes)
- Users/username/AppData/Roaming/Ocugiq/cyyqmaop.xa   (1,943,995 bytes)
- Users/username/AppData/Roaming/Uwgoz/kupayr.yx   (120,470 bytes)
- Users/username/AppData/Roaming/Amly/dezavyaq.af   (381,944 bytes)
- Users/username/AppData/Roaming/Ciho/ovulam.az   (0 bytes)
- Users/username/AppData/Roaming/Kyroep/vuep.ki   (321,090 bytes)
- Users/username/AppData/Roaming/Okge/anin.dll   (503,296 bytes)
- Users/username/AppData/Roaming/Yvyv/
- ZIIuhIe/rGmFquU/PLyUKBP.dll   (503,296 bytes)
Click here to return to the main page.