Unknown E-mail C2 Malware u.teknik.io PCAP file download traffic sample CHKDSK0.exe

017-11-29 20:09:32.668784 IP 192.168.1.102.51077 > 185.165.168.124.80: Flags [P.], seq 1471042674:1471043157, ack 3475486176, win 256, length 483: HTTP: GET /OrQwS.exe HTTP/1.1 E…a.@…r….f…|…PW.Tr.’..P…t…GET /OrQwS.exe HTTP/1.1 Accept: image/jpeg, application/x-ms-application, image/gif, application/xaml+xml, image/pjpeg, application/x-ms-xbap, …

Read More