Samson
10 posts

Samson
@samson2655
Independent malware researcher.
Spain Katılım Kasım 2022
62 Takip Edilen34 Takipçiler

#eyJyZXN1bHRzIjpbIn4iLCJmaXJzdFNlZW4iLDEsIiIsW11dfQ==" target="_blank" rel="nofollow noopener">labs.inquest.net/dfi/search/has…
ZXX

@InQuest @James_inthe_box @Ledtech3 81d77842292a2b26a9340665963f782bab88f4e3f2091cc8a60826e9f3648669
Português

@InQuest @James_inthe_box @Ledtech3 Converting the amount of information into a unique set of characters that is unique to this array of incoming information.
English

Very interesting document similar to Emotet
430d7c853638524e59abe98c593b2ae5
IoCs:
"hxxp://midnightsilvercrafters.com/store/wBjNOUw/" "hxxp://tempral.com/NATE_05_22_2009/BI710N4cQ6R3/"
"hxxps://redington.karmatechmediaworks.com/wp-content/3JVuVx7QUM/"
@James_inthe_box @InQuest

HT

A very interesting #maldoc that downloads and executes AgentTesla.
d47f953d6047e670becb5f7bcf57b61b
PE:2a5143de160247d04aa1e9f7e6399064
IoCs:
hxxp://185.246.220[.]65/lee/Tobpnq[.]bmp
hxxp://185.246.220[.]65/lee/IMG-07-94103[.]exe
@James_inthe_box @InQuest @Ledtech3
#malware

English






