Diaries by Keyword - SANS Internet Storm Center

Handler on Duty: Didier Stevens

Threat Level: green

Date	Author	Title
EVIL PONY
2019-11-20	Brad Duncan	Hancitor infection with Pony, Evil Pony, Ursnif, and Cobalt Strike
2019-02-06	Brad Duncan	Hancitor malspam and infection traffic from Tuesday 2019-02-05
EVIL
2021-01-21/a>	Xavier Mertens	Powershell Dropping a REvil Ransomware
2019-11-20/a>	Brad Duncan	Hancitor infection with Pony, Evil Pony, Ursnif, and Cobalt Strike
2019-02-06/a>	Brad Duncan	Hancitor malspam and infection traffic from Tuesday 2019-02-05
PONY
2020-01-16/a>	Jan Kopriva	Picks of 2019 malware - the large, the small and the one full of null bytes
2019-11-20/a>	Brad Duncan	Hancitor infection with Pony, Evil Pony, Ursnif, and Cobalt Strike
2019-02-06/a>	Brad Duncan	Hancitor malspam and infection traffic from Tuesday 2019-02-05
2017-02-10/a>	Brad Duncan	Hancitor/Pony malspam