Clik here to view.
Fallout Exploit Kit delivers suspect Remote Access Trojan (RAT)
I have added a zipped pcap file for your analysis. The password for the zipped pcap is infected all lowercase. PCAP file of the infection traffic: 2019-11-25-FalloutEK-pcap.zip ASSOCIATED DOMAINS:...
View ArticleClik here to view.
Rig Exploit Kit delivers Bot Ransomware
I have added a zipped pcap file for your analysis. The password for the zipped pcap is infected all lowercase. PCAP file of the infection traffic: 2019-11-30-RigEK-pcap.zip ASSOCIATED DOMAINS:...
View ArticleClik here to view.
Spelevo Exploit Kit delivers malware
I have added a zipped pcap file for your analysis. The password for the zipped pcap is infected all lowercase. PCAP file of the infection traffic: 2019-12-03-Spelevo-ek-pcap.zip ASSOCIATED DOMAINS:...
View ArticleClik here to view.
Purple Fox Exploit Kit drops fileless malware
Purple Fox Exploit Kit is known to be a fileless malware distributor. I did not see a payload dropped confirming fileless activity. For a more detailed analysis on Purple Fox, see TrendMicro’s blog –...
View ArticleClik here to view.
Rig Exploit Kit delivers Dridex
I have added a zipped pcap file for your analysis. The password for the zipped pcap is infected all lowercase. PCAP file of the infection traffic: 2020-01-30-Rig-EK-Dridex.zip ASSOCIATED DOMAINS:...
View ArticleClik here to view.
Rig Exploit Kit delivers Dridex
I have added a zipped pcap file for your analysis. The password for the zipped pcap is infected all lowercase. PCAP file of the infection traffic: 2020-02-15-Rig-EK-Dridex-pcap.zip ASSOCIATED DOMAINS:...
View ArticleClik here to view.
Example traffic of the Underminer Exploit Kit and how it interacts with an...
I have added a zipped pcap file for your analysis. The password for the zipped pcap is infected all lowercase. PCAP file of the infection traffic: 2020-02-16-Underminer-EK-pcap.zip ASSOCIATED DOMAINS:...
View ArticleClik here to view.
Spelevo Exploit Kit delivers Gozi Trojan
I have added a zipped pcap file for your analysis. The password for the zipped pcap is infected all lowercase. PCAP file of the infection traffic: 2020-02-19-Spelevo-EK-gozi-pcap.zip ASSOCIATED...
View ArticleClik here to view.
Fallout Exploit Kit delivers Raccoon Stealer
I have added a zipped pcap file for your analysis. The password for the zipped pcap is “infected” all lowercase. PCAP file of the infection traffic: 2020-02-24-Fallout-EK-Raccoon-pcap.zip ASSOCIATED...
View ArticleClik here to view.
Rig Exploit Kit delivers Ransomware
I have added a zipped pcap file for your analysis. The password for the zipped pcap is “infected” all lowercase. PCAP file of the infection traffic: 2020-03-04-Rig-EK-Ransomware-pcap.zip ASSOCIATED...
View Article
