2019-06-17 - PCAP AND MALWARE FOR AN ISC DIARY (RIG EK)

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

NOTES:

• The associated ISC diary is:  An infection from Rig exploit kit

ASSOCIATED FILES:

• 2019-06-17-Rig-EK-sends-AZORult-and-follow-up-malware.pcap.zip   6.5 MB (6,517,592 bytes)

2019-06-17-Rig-EK-sends-AZORult-and-follow-up-malware.pcap   (10,641,512 bytes)

• 2019-06-17-Rig-EK-malware-and-artifacts.zip   1.9 MB (1,926,068 bytes)

2019-06-17-Rig-EK-artifact-T.t.txt   (1,149 bytes)

2019-06-17-Rig-EK-flash-exploit.swf   (9,261 bytes)

2019-06-17-Rig-EK-landing-page.txt   (114,062 bytes)

2019-06-17-Rig-EK-payload-AZORult.exe   (354,304 bytes)

2019-06-17-msr.exe-from-hotelesmeflo.com.exe   (2,952,704 bytes)

 

Click here to return to the main page.