Tuesday, August 17, 2021

Quick Malware Analysis: malware-traffic-analysis.net pcap from 2021-05-20 Hancitor

Thanks to Brad Duncan for sharing this pcap!

We did a quick analysis of this pcap on the latest version of Security Onion via so-import-pcap:

If you'd like to follow along, you can create a minimal VM with 4GB RAM and install the latest version of Security Onion in Import mode following the screenshots in the Screenshot Tour here:

Here are some of the interesting Suricata alerts, Zeek logs, and session transcripts:

No comments: