#hancitor $malspam run. Subjects contain DocuSign Domains at pastebin.com/5Pxssy4w @JayTHL James Matthew Mesa

Incoming #Hancitor from [email protected], all subjects contain "DocuSign" James Matthew Mesa mak Steve 🆁🅴🅶🅶🅸🅴 wavellan karttoon Jordan Wright malware_traffic Amit Social @JayTHL Felix Herbie Zimmerman

Incoming #Hancitor from [email protected], all subjects contain "DocuSign" James Matthew Mesa mak Steve 🆁🅴🅶🅶🅸🅴 wavellan karttoon Jordan Wright malware_traffic Amit Social @JayTHL Felix Herbie Zimmerman

#AgentTesla /mail.edifler.xyz 9d532b4dc4b01cea647e9795c9db06b4 app.any.run/tasks/976a7891…

#wshrat C2: hxxp://grckko.ddnsgeek[.]com:3673/ Sample at: app.any.run/tasks/d6424e63…

Coronavirus themed #autoit #kpot C2: krt1[.]site app.any.run/tasks/8f771d9c…