Brad

@malware_traffic

Sharing information on malicious network traffic and malware samples

127.0.0.1
malware-traffic-analysis.net
Joined July 2013
2,309 Photos and videos Photos and videos

Tweets

You blocked @malware_traffic

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @malware_traffic

  1. 36 minutes ago

    2018-12-27 - pushes () - 7 email examples, a of the infection traffic, and the associated at: - saw sent with this infection and numerous Wordpress site login attempts from my infected host

    5 retweets 6 likes
    Undo
  2. 9 hours ago

    2018-12-27 - The message text in this example from today seems a little more lazy than usual - Paste of the email: - Pastebin raw:

    11 retweets 13 likes
    Undo
  3. 9 hours ago

    2018-12-27 - executable files sent as URLs ending in ".png" from 195.123.212[.]29 starting today - Paste with info on today's examples: - Pastebin raw: - See Pastebin info about toler.png (it's always an old file)

    16 retweets 28 likes
    Undo
  4. Dec 26

    2018-12-26 - Two files I provided for UA-CTF in Nov 2018 - Now available to the public, with my suggested tasks and answers - Not a , but bonus material for those who've done the regular exercises but want more practice -

    10 retweets 18 likes
    Undo
  5. Dec 26

    2018-12-18 - Traffic Analysis Exercise - Eggnog Soup - Answers are now available: -

    10 retweets 12 likes
    Undo
  6. Dec 26

    2018-12-26 - campaign using malicious XLS file attachments - Not sure what this is, but saw thousands of emails went out from this campaign earlier today - Paste of details at: - Pastebin Raw:

    1 reply . 27 retweets 45 likes
    Undo
  7. Retweeted
    Dec 26

    happy boxing day! sample anyone? Subject: order. W343357 Attachment 111 (1).doc doc callout hxxps://invoice.name/fetch/832d124add4964e37c6e4f5bbd94f373 Downloads

    1 reply . 12 retweets 14 likes
    Undo
  8. Dec 24

    2018-12-24 - executable files sent as URLs ending in ".png" from 91.200.100[.]169 starting as early as Wednesday 2018-12-19 - Paste with info on today's examples available at: - Pastebin raw:

    1 reply . 26 retweets 40 likes
    Undo
  9. Retweeted
    Dec 21

    Filename Check_Track_130838161.doc Download URLs hxxp://23.92.89 155/hole2.php hxxp://192.227.204 214/hole1.php hxxp://167.160.36 37/hole3.php Excutable: hxxp://[above ip]/crean.ova

    2 replies . 10 retweets 22 likes
    Undo
  10. Dec 21

    2018-12-19 - pushing is still a thing (ever since 2004). I don't think it will ever go away. - Recent examples and a of the infection traffic available at:

    13 retweets 20 likes
    Undo
  11. Dec 21

    2018-12-20 - Quick post: infection with - and at:

    28 retweets 37 likes
    Undo
  12. Retweeted
    Dec 21

    2018-12-21: [Technical] Let's Learn: In-Depth on / Golang | Project Debugging Path -> "C:/!Project/C1/ProjectC1Dec/main.go" | Host Collection, Screenshot, C2, Exec | Golang Open Source Copy/Paste | 16 main* Functions +

    2 replies . 66 retweets 103 likes
    Undo
  13. Dec 20

    2018-12-20 - Three days of infections, today with - files of the infection traffic, associated , and two examples available at

    1 reply . 28 retweets 28 likes
    Undo
  14. Dec 20

    2018-12-20 - File info from malspam infection (XLS file, EXE, EXE, and EXE) - Original thread started by : - Paste: - Pastebin raw (without the ads):

    2 replies . 24 retweets 40 likes
    Undo
  15. Dec 19

    2018-12-19 - Traffic Analysis Exercise - Eggnog Soup - Join the fun at: - How do you make an Eggnog Soup exercise? - Add a few Windows hosts and a scoop of non-Windows hosts to the mix, then bake the at 1500 MTU for 11 min -

    1 reply . 4 retweets 13 likes
    Undo
  16. Retweeted
    Dec 19

    More via passworded resume doc hosted at: http://209.141.61[.]249/555.exe c2 domains: lanoj[.]pw losived[.]host priolonis[.]host whoisther[.]com cc

    3 replies . 14 retweets 22 likes
    Show this thread
    Show this thread
    Undo
  17. Dec 19

    2018-12-19 - Example of - Paste: - Pastebin raw: - Submitted to VT:

    7 retweets 11 likes
    Undo
  18. Retweeted
    Dec 19

    2018-12-19 email - various senders Sub: various w/ACH

    2 replies . 11 retweets 13 likes
    Show this thread
    Show this thread
    Undo
  19. Dec 19

    2018-12-19 - File info from malspam infection (XLS file, EXE, and EXE) - Thanks for your initial tweet chain about this - Paste: - Pastebin raw (without the ads):

    1 reply . 17 retweets 21 likes
    Undo
  20. Retweeted
    Dec 19
    Replying to

    Thanks for the heads up on this issue - I have found the bug which is now fixed in . I won't be able to update the community instance until tonight or tomorrow but I will reprocess these failed jobs. Sorry for the inconvenience!

    1 reply . 4 retweets 8 likes
    Undo

@malware_traffic hasn't Tweeted yet.

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·