2021-10-05 (TUESDAY) - MIRRORBLAST/KIXTART INFECTION

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

ASSOCIATED FILES:

• 2021-10-05-MirrorBlast-infection-traffic.pcap.zip   1.1 MB   (1,089,381 bytes)

• 2021-10-05-MirrorBlast-infection-traffic.pcap   (1,273,540 bytes)

• 2021-10-05-MirrorBlast-malware-with-email-and-IOCs.zip   2.8 MB   (2,779,536 bytes)

• 2021-10-05-MirrorBlast-IOCs.txt   (6,522 bytes)
• 2021-10-05-MirrorBlast-alerts.jpg   (1,408,470 bytes)
• 2021-10-05-MirrorBlast-email-example.eml   (17,771 bytes)
• 10opd3r_load.msi   (561,152 bytes)
• filter.msi   (188,416 bytes)
• Employee_Authorization_Form.xls   (174,080 bytes)
• ProgramData/001/arab.bin   (261 bytes)
• ProgramData/001/arab.exe   (294,912 bytes)
• ProgramData/Local/Google/arch   (6 bytes)
• ProgramData/Local/Google/exemple.rb   (1002 bytes)
• ProgramData/Local/Google/name   (31 bytes)
• ProgramData/Local/Google/os   (8 bytes)
• ProgramData/Local/Google/rebol-view-278-3-1.exe   (864,256 bytes)
• ProgramData/Local/Google/uuid   (36 bytes)

 

Click here to return to the main page.