2018-08-22 - QUICK POST: HANCITOR INFECTION WITH ZEUS PANDA BANKER

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

ASSOCIATED FILES:

• 2018-08-22-Hancitor-malspam-example-1442-UTC.eml.zip   2.0 kB (1,984 bytes)

• 2018-08-22-Hancitor-malspam-example-1442-UTC.eml   (5,583 bytes)

• 2018-08-22-Hancitor-infection-traffic.pcap.zip   543 kB (543,100 bytes)

• 2018-08-22-Hancitor-malspam-infection-traffic.pcap   (725,469 bytes)

• 2018-08-22-malware-from-Hancitor-infections.zip   327 kB (327,269 bytes)

• 2018-08-22-downloaded-Word-doc-with-macro-for-Hancitor.doc   (189,952 bytes)
• 2018-08-22-Hancitor-malware-binary.exe   (58,880 bytes)
• 2018-08-22-Zeus-Panda-Banker-caused-by-Hancitor.exe   (214,016 bytes)

 

Shown above:  Traffic from an infection on Monday 2018-08-20 filtered in Wireshark.

 

Click here to return to the main page.