[Zerophage Malware Index]
July-24-19 -> An update on what I’ve been up to.

August-17-18 -> Rig EK via HookAds drops AZORult loading Quasar RAT
June-15-18 -> GranSoftEK drops GandCrab via Ascentor Loader.
May-22-18 ->RIG EK via Ngay drops Smokeloader -> XMR Miner
April-16-18 -> Rig EK via Malvertising drops Smoke Loader
April-09-18 -> Rig EK drops GandCrab Ransomware Via CVE-2018-4878
Febuary-09-18 ->GrandSoft EK via Slots drops Leviarcoin Miner
January-23-18 -> Maldoc (RTF) drops Loda Logger
December-10-17 -> Malware – Snatch Loader: Reloaded
October-17-17 ->Rig EK drops Ursnif/ISFB variant

October-14-17 ->Rig EK drops Smoke loaders leading to XMR Miner.
October-13-17 ->Rig EK via Malvertising drops a Smoke Loader leading to a Miner and AZORult.

September-21-17 ->Rig EK via Rulan drops an Infostealer
September-11-17 ->Rig EK via Rulan drops Quant Loader (leads to Ursnif)
August-06-17 ->Rig EK Drops Bunitu, Smoke Loader, Andromeda and a Miner
August-02-17 ->Rig EK via malvertising drops a trojan/infostealer
August-01-17 -> Rig EK via JavaScript Re-director drops UrlZone Trojan Banker.
August-01-17 -> Magnitude EK XML Package and changes.
July-31-17 -> Three Rig EK Campaigns

July-16-17 -> Rig EK via Malvertising drops Panda Banker 
July-14-17 -> Rig EK delivers Kronos Banker

July-03-17 -> Magnitude EK drops Cerber (Scriplet changed to “.bmp”)
June-28-17 ->Magnitude EK drops “CBRB” (Cerber Ransomware)
June-24-17 ->Rig & Magnitude + 1000 follower Post

June-23-17 ->Rig EK via JS Redirector leads to Pushdo dropping Cutwail.
June-16-17 -> Four Rig EK Flows from Malvertising (Bunitu & Chthonic)
June-14-17 -> Rig EK via malvertising drops Dreambot
June-12-17 -> Rig EK via Malvertising drops Zloader and Chthonic
June-7-17 -> Rig EK via Fake EVE Online website drops Bunitu.
June-6-17 -> Rig EK Via RoughTed Delivers Chthonic
Jun-5-17 ->Rig EK via RoughTed drops a Miner
May-31-17 ->Magnitude EK via RoughTed drops Cerber Ransomware
May-30-17 ->Rig EK via RoughTed Malvertising drops Kovter
May-25-17 -> Magnitude EK via malvertising delivers Cerber Ransomware
May-19-17 -> Rig EK via TDS drops Smoke Loader, leads to TeamViewer.
May-17-17 -> Magnitude EK via Malvertising drops Cerber Ransomware
May-15-17 -> Rig EK drops Pony, leads to Philadelphia Ransomware
May-14-17 -> Rig EK delivers Chthonic
May-12-17 -> Rig EK drops Bunitu Proxy Trojan
May-09-17 -> Rig EK drops failed payload. (new params)
Apr-27-17 -> Rig EK via Decimal Redirect Drops Smoke Loader.
Apr-27-17 -> Multiple Magnitude EK drops Cerber Ransomware Samples
Apr-21-17 -> Magnitude EK delivers Cerber
Apr-20-17 -> Magnitude EK URL’s from 14-20 April
Apr-14-17 -> Terror EK via Malvertising drops Smoke Loader
Apr-11-17 ->Unknown EK from Magnitude EK Gate drops Loader.
Apr-10-17 -> Rig EK via Malvertising delivers Bunitu
Apr-2-17 -> Terror EK delivers K.I.N.S.
Apr-1-17 -> Terror EK delivers BitCoin Miner
Mar-29-17 -> Rig EK delivers Smoke Loader

Mar-24-17 ->Terror EK via Malvertising delivers Tofsee Spambot

Mar-23-17 ->Magnitude EK via Malvertising

Mar-20-17 ->Rig EK delivers Bunitu Proxy Trojan

Mar-18-17 ->Rig EK via Malvertising delivers ZeuS Panda

Mar-13-17 ->Rig EK via Malvertising delivers ZeuS variant Chthonic.

Mar-08-17 ->Sundown EK delivers ZeuS Panda (but C2 offline)

Mar-08-17 ->Rig EK delivers August Stealer

Mar-06-17 ->Sundown EK delivers Zloader and Zbot

Mar-01-17 ->Sundown EK delivers failed payload.

Feb-28-17 -> Rig EK via Malvertising delivers Bunitu.

Feb-20-17 -> Rig EK via Malvertising drops Unknown DLL

Feb-15-17 -> Rig EK via Malvertising delivers Bunitu Trojan

Feb-14-17 -> Sundown EK via Malvertising delivers Zloader

Feb-13-17 -> Rig via PseudoDarkleech delivers Cerber Ransomware

Feb-02-17 -> Rig via PseudoDarkleech delivers Cerber Ransomware

Jan-30-17 -> Rig via PseudoDarkleech delivers Cerber Ransomware

Jan-25-17 -> Rig-V via PseudoDarkleech delivers Cerber..

Jan-23-17 -> Phishing email “Company Investigations” leads to Ursnif.

Jan-19-17 -> Rig-V via PseudoDarkleech delivers Cerber?































