2020-01-22 - QUICK POST: HANCITOR INFECTION WITH URSNIF
- 2020-01-22-Hancitor-malspam-example.eml.zip 2.0 kB (2,001 bytes)
- 2020-01-22-Hancitor-infection.pcap.zip 245 kB (245,257 bytes)
- 2020-01-22-Hancitor-infection-with-Ursnif.pcap.zip 272 kB (271,815 bytes)
- 2020-01-22-Hancitor-and-Ursnif-malware-and-artifacts.zip 465 kB (464,624 bytes)
- Zip archives are password-protected with the standard password. If you don't know it, see the "about" page of this website.
- My pcap of Hancitor with Ursnif is a sanitized version of the pcap from the Any.Run analysis of the associated VBS file (link).
Click here to return to the main page.