2018-02-14 - QUICK POST: HANCITOR INFECTION WITH ZEUS PANDA BANKER

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

ASSOCIATED FILES:

• Zip archive of the traffic:  2018-02-14-Hancitor-infection-with-Zeus-Panda-Banker.pcap.zip   2.6 MB (2,565,445 bytes)

• 2018-02-14-Hancitor-infection-with-Zeus-Panda-Banker.pcap   (3,383,487 bytes)

• Zip archive of the emails:  2018-02-14-Hancitor-malspam-3-examples.txt.zip   2.0 kB (2,006 bytes)

• 2018-02-14-Hancitor-malspam-3-examples.txt   (21,051 bytes)

• Zip archive of the malware:  2018-02-14-malware-from-Hancitor-infection.zip   238.6 kB (238,637 bytes)

• 2018-02-14-Hancitor-maldoc-invoice_291638.doc   (277,504 bytes)
• 2018-02-14-Zeus-Panda-Banker-sample.exe   (114,688 bytes)

Shown above:  Traffic from the infection filtered in Wireshark.

 

Click here to return to the main page.