Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Necurs Targeting Banks with PUB File that Drops FlawedAmmyy
- IOC’s
- Subject: Request BOI
- Subject: Payment Advice DHS<9 digits>
- Filenames
- Payment_Advice_DHS<9 digits>.pub
- pub
- File MD5
- 5fdeaa5e62fabc9933352efe016f1565
- URL
- Hxxp://f79q[DOT]com/aa1
- References:
- https://securityintelligence.com/the-necurs-botnet-a-pandoras-box-of-malicious-spam/
Add Comment
Please, Sign In to add comment
