Malware_traffic's Pastebin

17,681 94,538 5 years ago
Name / Title Added Expires Hits Syntax  
2019-09-13 - Malspam pushing Shade ransomware Sep 13th, 19 Never 1,011 None -
2019-09-03 - Malspam with password-protected Word ... Sep 3rd, 19 Never 309 None -
2019-08-28 - File info from today's Ursnif infection Aug 28th, 19 Never 1,321 None -
2019-08-26 - files from Ursnif infection with Tric... Aug 26th, 19 Never 1,411 None -
2019-08-22: Trickbot EXEs associated with IcedID (... Aug 22nd, 19 Never 1,933 None -
2019-08-22 - info on malspam pushing Shade ransomware Aug 22nd, 19 Never 1,478 None -
2019-08-22 - malspam pushing Shade (Troldesh) rans... Aug 22nd, 19 Never 161 None -
2019-08-21 - malspam pushing Shade (Troldesh) rans... Aug 21st, 19 Never 1,272 None -
2019-08-21 - malspam pushing Shade (Troldesh) - 2 ... Aug 21st, 19 Never 123 None -
2019-08-21 - malspam pushing Shade (Troldesh) - 1 ... Aug 21st, 19 Never 144 None -
2019-08-19 - Trickbot binaries, "the PNGs" Aug 20th, 19 Never 1,251 None -
2019-08-12 - Trickbot EXEs from URLs ending with .png Aug 12th, 19 Never 958 None -
IcedID (Bokbot)-related Trickbot binaries seen on ... Aug 12th, 19 Never 1,079 None -
2019-07-30 - Trickbot binaries, "the PNGs" Jul 30th, 19 Never 763 None -
File hashes from Hancitor infection on Monday 2019... Jul 22nd, 19 Never 1,247 None -
2019-06-25 and 06-26 - Malspam pushing Trickbot (g... Jun 26th, 19 Never 2,164 None -
2019-06-20 - malspam pushing Nanocore RAT Jun 20th, 19 Never 932 None -
2019-06-13 - Malspam with XLS attachment Jun 13th, 19 Never 1,024 None -
2019-05-30 - PASSWORD-PROTECTED WORD DOCS FROM MAL... May 30th, 19 Never 1,413 None -
2019-05-28 - EXAMPLE OF EMOTET MALSPAM (2 OF 2) May 29th, 19 Never 1,197 None -
2019-05-28 - EXAMPLE OF EMOTET MALSPAM (1 OF 2) May 29th, 19 Never 1,305 None -
2019-05-20 - malspam pushing Lokibot May 20th, 19 Never 1,132 None -
2019-05-02 - Emotet malspam example May 2nd, 19 Never 1,594 None -
2019-04-24 - Emote malspam example Apr 24th, 19 Never 1,739 None -
New password-protected docs in malspam since 2018-... Apr 19th, 19 Never 900 None -
2019-04-19 - malspam pushing Danabot Apr 19th, 19 Never 706 None -
2019-04-16 - Trickbot malspam - gtag: sat43 Apr 16th, 19 Never 1,138 None -
2019-04-15 - Lokibot malspam example Apr 15th, 19 Never 1,531 None -
2019-04-04 - Example of Emotet malspam Apr 4th, 19 Never 1,426 None -
2019-04-03 - Hancitor malspam example Apr 3rd, 19 Never 1,107 None -
2019-04-01 - Active URLs for Emotet Apr 1st, 19 Never 957 None -
2019-03-25 - Rig EK landing page from 79.174.13.20 Mar 25th, 19 Never 985 None -
2019-03-18 - malspam pushing Trickbot (gtag: ono1) Mar 18th, 19 Never 757 None -
2019-03-14 - Info on Trickbot malspam wave Mar 14th, 19 Never 671 None -
2019-03-14 - Trickbot malspam example (gtag day2) Mar 14th, 19 Never 560 None -
2019-03-14 - Malware from password-protected Word doc Mar 14th, 19 Never 758 None -
2019-03-12 - Qakbot EXE sent to Emotet-infected Wi... Mar 12th, 19 Never 760 None -
2019-03-11 - Emotet malspam example Mar 11th, 19 Never 1,110 None -
2019-03-11 - Example of malspam pushing Trickbot g... Mar 11th, 19 Never 629 None -
2019-03-11 - Malspam pushing Trickbot - gtag: day2 Mar 11th, 19 Never 1,096 None -
2019-03-06 - Trickbot malspam example (gtag ser030... Mar 6th, 19 Never 517 None -
2019-03-05 and 06: malware from malspam pushing Ur... Mar 6th, 19 Never 461 None -
2019-03-05 - Trickbot inject module name tied to g... Mar 5th, 19 Never 677 None -
2019-03-04 - #Emotet #malspam example Mar 4th, 19 Never 732 None -
2019-03-04 - malspam pushes Hawkeye keylogger/info... Mar 4th, 19 Never 479 None -
2019-02-28 - Hancitor malspam example Feb 28th, 19 Never 876 None -
2019-02-26 - Malware from Hancitor infection Feb 26th, 19 Never 562 None -
2019-02-26 - Example of malspam pushing Hancitor Feb 26th, 19 Never 930 None -
2019-02-25 - Example of malspam pushing Hancitor Feb 25th, 19 Never 716 None -
2019-02-25 - malware from Hancitor infection Feb 25th, 19 Never 516 None -
2019-02-21 - Example of malspam pushing Hanctor Feb 21st, 19 Never 948 None -
2019-02-14 - Emotet malspam example with download ... Feb 14th, 19 Never 1,127 None -
2019-02-14 - Recent Trickbot weirdness Feb 14th, 19 Never 2,016 None -
2019-02-14 - Malspam using password-protected Word... Feb 14th, 19 Never 2,058 None -
2019-02-14 - Malspam uses Dropbox link to push For... Feb 14th, 19 Never 2,426 None -
2019-02-13 - Hancitor malspam example Feb 13th, 19 Never 1,033 None -
2019-02-13 - Emotet malspam example with PDF attac... Feb 13th, 19 Never 1,143 None -
2019-02-12 - Emotet malspam example with PDF attac... Feb 12th, 19 Never 1,282 None -
2019-02-12 - malware from Hancitor infection Feb 12th, 19 Never 1,015 None -
2019-02-12 - Hancitor malspam (USPS theme) Feb 12th, 19 Never 1,152 None -
2019-02-09 - Fake Updates campaign pushes Chthonic Feb 8th, 19 Never 1,086 None -
Since 2019-02-04 - Trickbot EXEs as PNG: Sin, Tin,... Feb 8th, 19 Never 876 None -
2019-02-08 (Friday) - Trickbot malspam (gtag: sat36) Feb 8th, 19 Never 926 None -
2019-02-05 - Trickbot malspam - gtag: ser0205us Feb 5th, 19 Never 1,291 None -
2019-02-04 - Trickbot EXEs as .png from 185.68.93[... Feb 4th, 19 Never 903 None -
2019-01-29 - Fallout EK possible exploit Jan 29th, 19 Never 208 None -
2019-01-29 - Fallout EK landing page Jan 29th, 19 Never 206 None -
2019-01-29 - Fallout EK (HTTPS) sends SmokeLoader ... Jan 29th, 19 Never 1,083 None -
2019-01-29 - Malspam pushing AZORult Jan 29th, 19 Never 1,335 None -
2019-01-29 - example of Emotet malspam Jan 29th, 19 Never 1,115 None -
2019-01-28 - Trickbot malspam (gtag: ser0128us) Jan 28th, 19 Never 884 None -
2019-01-08 - Trickbot EXEs as .png from 107.173.10... Jan 28th, 19 Never 633 None -
2019-01-28 - Hancitor malspam example Jan 28th, 19 Never 1,150 None -
2019-01-28 - malware from Hancitor infection Jan 28th, 19 Never 1,144 None -
2019-01-23 - malware from Hancitor infection Jan 23rd, 19 Never 4,202 None -
2019-01-22 - Malware from Hancitor infection Jan 22nd, 19 Never 741 None -
2019-01-21 - Sextortion email example Jan 21st, 19 Never 1,807 None -
2019-01-18 - Password-protected Word docs pushing ... Jan 18th, 19 Never 2,274 None -
2019-01-16 - malware from Hancitor infection Jan 16th, 19 Never 565 None -
2019-01-14 - Trickbot malspam (gtag: sat33) Jan 14th, 19 Never 821 None -
2019-01-08 - Trickbot EXEs sent as .png from 198.2... Jan 8th, 19 Never 674 None -
2019-01-04 - example of Sextortion spam Jan 4th, 19 Never 1,324 None -
2019-01-02 - Phishing email with link to fake logi... Jan 2nd, 19 Never 606 None -
2018-12-31 malspam example: Excel attachment pushi... Dec 31st, 18 Never 215 None -
2018-12-31 - malspam uses Excel attachment to push... Dec 31st, 18 Never 752 None -
2018-12-28 Trickbot EXEs sent as .png from 198.144... Dec 28th, 18 Never 631 None -
2018-12-27 - Sextortion spam example Dec 27th, 18 Never 532 None -
2018-12-27: Trickbot EXEs sent as .png from 195.12... Dec 27th, 18 Never 658 None -
2018-12-26 - malspam using malicious XLS file atta... Dec 26th, 18 Never 981 None -
2018-12-26 malspam with malicious XLS attachment -... Dec 26th, 18 Never 156 None -
2018-12-26 malspam with malicious XLS attachment -... Dec 26th, 18 Never 264 None -
2018-12-24: Trickbot EXEs sent as .png from 91.200... Dec 24th, 18 Never 765 None -
Trickbot (gtag: sat31) malspam Friday 2018-12-21 Dec 21st, 18 Never 1,012 None -
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!
 
Top