2021-06-17 (THURSDAY) - HANCITOR WITH COBALT STRIKE
NOTICE:
- The zip archives on this page have been updated, and they now use the new password scheme. For the new password, see the "about" page of this website.
ASSOCIATED FILES:
- 2021-06-17-Hancitor-IOCs.txt.zip 4.0 kB (3,979 bytes)
- 2021-06-17-Hancitor-malspam-26-examples.zip 64.2 kB (64,282 bytes)
- 2021-06-17-Hancitor-infection-with-Cobalt-Strike.pcap.zip 8.1 MB (8,136,775 bytes)
- 2021-06-17-Hancitor-Word-docs-and-DLL-files.zip 9.3 MB (9,345,178 bytes)
IMAGES
Shown above: Traffic from an infection filtered in Wireshark.
Click here to return to the main page.