2019-08-14 - PCAP AND MALWARE FOR AN ISC DIARY ABOUT MEDUSAHTTP

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

REFERENCE:

• The associated ISC diary is Recent Example of MedusaHTTP Malware.

ASSOCIATED FILES:

• 2019-08-12-Rig-EK-sends-MedusaHTTP-malware.pcap.zip   669 kB (669,134 bytes)

• 2019-08-12-Rig-EK-sends-MedusaHTTP-malware.pcap   (743,725 bytes)

• 2019-08-13-MedusaHTTP-malware-traffic.pcap.zip   24.7 MB (24,674,618 bytes)

• 2019-08-13-MedusaHTTP-malware-traffic.pcap   (36,564,396 bytes)

• 2019-08-12-Rig-EK-and-MedusaHTTP-malware-and-artifacts.zip   462 kB (462,070 bytes)

• 2019-08-12-Rig-EK-artifact-T.t.txt   (1,149 bytes)
• 2019-08-12-Rig-EK-flash-exploit.swf   (9,397 bytes)
• 2019-08-12-Rig-EK-landing-page.txt   (128,389 bytes)
• 2019-08-12-Rig-EK-payload-MedusaHTTP-malware.exe   (571,904 bytes)
• 2019-08-12-windows-registry-update-used-by-MedusaHTTP-malware.txt   (642 bytes)

 

Click here to return to the main page.