2018-03-08 - QUICK POST: HOOKADS CAMPAIGN RIG EK SENDS BUNITU
NOTICE:
- The zip archives on this page have been updated, and they now use the new password scheme. For the new password, see the "about" page of this website.
ASSOCIATED FILES:
- Zip archive of the traffic: 2018-03-08-Hookads-campaign-Rig-EK-sends-Bunitu.pcap.zip 15.0 MB (15,008,806 bytes)
- Zip archive of the malware: 2018-03-08-Hookads-campaign-Rig-EK-and-Bunitu-malware-and-artifacts.zip 157 kB (156,589 bytes)
NOTES:
- I last documented the HookAds campaign using Rig EK on 2017-08-01. Check that to compare the subtle changes between now and then.
- Malwarebreakdown.com posted a recent example dated 2018-03-07.
Click here to return to the main page.