Trusted Design

Malware-Traffic-Analysis.net - 2017-10-02 - Necurs Botnet malspam sto;; pushing .ykcol" variant Locky ransomware

概要

from Malware Traffic Analysis: NOTES: Has this been still going on every weekday, since I last documented it on 2017-09-18? So repetitive... So boring. Didn't notice any post-infection callback traffic after the initial Locky download.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Malware-Traffic-Analysis.net - FTFY: Necurs Botnet malspam pushing .asasin" variant Locky ransomware (score: 0.83)
• Necurs Botnet malspam pushing .ykcol" variant Locky ransomware (score: 0.77)
• Malware-Traffic-Analysis.net - 2017-10-30 - Necurs Botnet malspam uses DDE attack to push Locky (score: 0.77)
• Malware-Traffic-Analysis.net - 2017-10-24 - Necurs Botnet malspam uses DDE attack to push Locky (score: 0.76)
• Malware-Traffic-Analysis.net - 2017-10-24 - Necurs Botnet malspam uses DDE attack to push Locky (score: 0.76)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る