2016-09-28 - PCAP AND MALWARE FOR AN ISC DIARY

NOTES:

• The associated ISC diary is for Wednesday 2016-09-28:  Rig Exploit Kit from the Afraidgate Campaign
• ZIP files are password-protected with the standard password.  If you don't know it, look at the "about" page of this website.

 

ASSOCIATED FILES:

• ZIP archive of the pcaps:  2016-09-28-pcap-for-ISC-diary.zip   250.8 kB (250,770 bytes)

• 2016-09-28-Afraidgate-Rig-EK-sends-Locky-ransomware.pcap   (301,179 bytes)

• ZIP archive of the malware:  2016-09-28-malware-and-artifacts-for-ISC-diary.zip   257.2 kB (257,182 bytes)

• 2016-09-28-Afraidgate-Rig-EK-flash-exploit.swf   (25,602 bytes)
• 2016-09-28-Afraidgate-Rig-EK-landing-page.txt   (29,965 bytes)
• 2016-09-28-Afraidgate-Rig-EK-payload-Locky-downloader.exe   (48,640 bytes)
• 2016-09-28-followup-malware-Locky.exe   (181,760 bytes)
• 2016-09-28-story.opiniaonline.ro-js-jquery.scrollbar.js.txt   (378 bytes)
• _HOWDO_text.bmp   (3,721,466 bytes)
• _HOWDO_text.html   (9,565 bytes)

 

Click here to return to the main page.