Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Diaries by Keyword Diaries by Keyword

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Date Author Title
2020-10-14Brad DuncanMore TA551 (Shathak) Word docs push IcedID (Bokbot)
2020-08-07Brad DuncanTA551 (Shathak) Word docs push IcedID (Bokbot)
2020-05-13Brad DuncanMalspam with links to zip archives pushes Dridex malware
2020-05-03Didier StevensZIP & AES
2020-04-26Didier StevensVideo: Malformed .docm File
2020-04-08Brad DuncanGerman malspam pushes ZLoader malware
2020-04-04Didier StevensNew Bypass Technique or Corrupt Word Document?
2020-03-25Brad DuncanRecent Dridex activity
2020-01-22Brad DuncanGerman language malspam pushes Ursnif
2019-03-14Didier StevensTip: Ghidra & ZIP Files
2018-12-17Didier StevensPassword Protected ZIP with Maldoc
2017-08-26Didier StevensMalware analysis: searching for dots
2016-11-22Didier StevensUpdate:ZIP With Comment
2016-11-21Didier StevensZIP With Comment