2019-09-16 - DATA DUMP: (GOZI/ISFB) URSNIF INFECTION WITH ICEDID AND TRICKBOT (GTAG: LEO16)

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

ASSOCIATED FILES:

• 2019-09-16-Ursnif-infection-with-IcedID-and-Trickbot.pcap.zip   18.5 MB (18,450,602 bytes)
• 2019-09-16-Ursnif-IcedID-and-Trickbot-malware-and-artifacts.zip   15.9 MB (15,862,990 bytes)

 

IMAGES

Shown above:  Traffic from the infection filtered in Wireshark.

 

Click here to return to the main page.