2018-12-10 - QUICK POST: MALSPAM WITH PASSWORD PROTECTED WORD DOC PUSHES NYMAIM
- 2018-12-10-malspam-with-password-protected-Word-doc-1533-UTC.eml.zip 34 kB (34,021 bytes)
- 2018-12-10-password-protected-Word-doc-pushes-Nymaim.pcap.zip 6.0 MB (6,002,969 bytes)
- 2018-12-10-malware-from-Nymaim-infection.zip 3.9 MB (3,932,667 bytes)
- Password for the password-protected Word doc is: 1234
- Zip archives are password-protected with the standard password. If you don't know it, look at the "about" page of this website.
Shown above: Infection traffic filtered in Wireshark.
Click here to return to the main page.