Thursday, August 19, 2021

Quick Malware Analysis: malware-traffic-analysis.net pcap from 2021-05-14 Ursnif

Thanks to Brad Duncan for sharing this Ursnif pcap!
https://www.malware-traffic-analysis.net/2021/05/14/index.html

We did a quick analysis of this pcap on the latest version of Security Onion via so-import-pcap:
https://docs.securityonion.net/en/2.3/so-import-pcap.html

If you'd like to follow along, you can create a minimal VM with 4GB RAM and install the latest version of Security Onion in Import mode following the screenshots in the Screenshot Tour here:
https://blog.securityonion.net/2021/07/security-onion-2360-now-available.html

Here are some of the interesting Suricata alerts, Zeek logs, and session transcripts:











No comments:

Search This Blog

Featured Post

Registration Now Open for Augusta Cyber Week 2025!

Registration is now open for Augusta Cyber Week in beautiful Augusta GA from October 20, 2025 through October 25, 2025! This includes: 4-day...

Popular Posts

Blog Archive