2022-09-21 (WEDNESDAY) - ASTAROTH (GUILDMA) INFECTION FROM BRAZIL MALSPAM

REFERENCE:

• https://twitter.com/Unit42_Intel/status/1572688136077193216/

NOTES:

• Zip files are password-protected.  If you don't know the password, see the "about" page of this website.

ASSOCIATED FILES:

• 2022-09-21-IOCs-for-Astaroth-Guildma-infection.txt.zip   1.7 kB   (1,670 bytes)
• 2022-09-21-Astaroth-Guildma-malspam-125412-UTC.eml.zip   5.3 kB   (5,281 bytes)
• 2022-09-21-Astaroth-Guildma-infection.pcap.zip   7.4 MB   (7,375,260 bytes)
• 2022-09-21-Astaroth-Guildma-malware-and-artifacts.zip   8.1 MB   (8,096,177 bytes)

 

Click here to return to the main page.