2017-03-04 - QUICK POST: KAIXIN EK FROM 220.170.89[.]153

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

ASSOCIATED FILES:

• 2017-03-04-KaiXin-EK-traffic-2-pcaps.zip   13.5 MB (12,535,139 bytes)

 

TRAFFIC

Shown above:  Traffic from the infection filtered in Wireshark (1st pcap).

 

Shown above:  Traffic from the infection filtered in Wireshark (2nd pcap).

 

Click here to return to the main page.