2020-09-23 - SPAMBOT TRAFFIC FROM QAKBOT-INFECTED HOST

ASSOCIATED FILES:

• 2020-09-23-Qakbot-spambot-activity-IOCs.txt.zip   3.3 kB   (3,332 bytes)
• 2020-09-23-example-of-Qakbot-spambot-activity.pcap.zip   5.3 MB   (5,316,238 bytes)
• 2020-09-23-Qakbot-malspam-17-examples.zip   1.3 MB   (1,337,707 bytes)
• 2020-09-23-Qakbot-malspam-attachments-17-examples.zip   1.3 MB   (1,252,423 bytes)
• 2020-09-23-Qakbot-XLS-files-17-examples.zip   1.3 MB   (1,253,046 bytes)

NOTES:

• All zip archives on this site are password-protected with the standard password.  If you don't know it, see the "about" page of this website.

IMAGES

Shown above:  Traffic from an infection filtered in Wireshark.

Shown above:  Filter to find any unencrypted SMTP messages in the pcap.

Shown above:  Extracting emails from unencrypted email traffic in the pcap.

Click here to return to the main page.