2021-03-18 - HANCITOR (CHANITOR) ACTIVIY (MAN1/MOSKALVZAPOE/TA511)
ASSOCIATED FILES:
- 2021-03-18-Hancitor-infection-IOCs.txt.zip 3.1 kB (3,137 bytes)
- 2021-03-18-Hancitor-malspam-20-examples.zip 49.1 kB (49,075 bytes)
- 2021-03-18-Hancitor-doc-and-DLL-files-5-pairs.zip 4.3 MB (4,315,632 bytes)
- 2021-03-18-Hancitor-infection-traffic.pcap.zip 9.8 MB (9,803,424 bytes)
NOTES:
IMAGES
Shown above: Example of Hancitor malspam today.
Shown above: Downloading a malicious Word document from one of the email links.
Shown above: Traffic from an infection filtered in Wireshark.
Click here to return to the main page.