Few Atoms
@fewatoms
One more amateur #malware hunter
ID: 951498497584492544
11-01-2018 16:58:14
1,1K Tweet
4,4K Followers
5 Following
More #Dridex being delivered from Discord app. A less common Microsoft Threat Intelligence coercive lure in the #maldoc Dridex payload URL: hxxps://cdn.discordapp[.]com/attachments/877498008575549440/877498048991858688/11.dll Frost Few Atoms Mikhail Kasimov abuse.ch 😉 labs.inquest.net/dfi/sha256/968…
![More #Dridex being delivered from <a href="/discord/">Discord</a> app. A less common <a href="/MsftSecIntel/">Microsoft Threat Intelligence</a> coercive lure in the #maldoc
Dridex payload URL:
hxxps://cdn.discordapp[.]com/attachments/877498008575549440/877498048991858688/11.dll
<a href="/fr0s7_/">Frost</a>
<a href="/FewAtoms/">Few Atoms</a>
<a href="/500mk500/">Mikhail Kasimov</a>
<a href="/abuse_ch/">abuse.ch</a> 😉
labs.inquest.net/dfi/sha256/968…](https://pbs.twimg.com/media/E9FXyNFXIAAGW6i.jpg "InQuest (@inquest) on Twitter photo More #Dridex being delivered from <a href=\"/discord/\">Discord</a> app. A less common <a href=\"/MsftSecIntel/\">Microsoft Threat Intelligence</a> coercive lure in the #maldoc
Dridex payload URL:
hxxps://cdn.discordapp[.]com/attachments/877498008575549440/877498048991858688/11.dll
<a href=\"/fr0s7_/\">Frost</a>
<a href=\"/FewAtoms/\">Few Atoms</a>
<a href=\"/500mk500/\">Mikhail Kasimov</a>
<a href=\"/abuse_ch/\">abuse.ch</a> 😉
labs.inquest.net/dfi/sha256/968…")
![And another #dridex #opendir from my friend <a href="/FewAtoms/">Few Atoms</a>
swastikengg[.]com/js/revolution-slider/fonts/revicons/](https://pbs.twimg.com/media/E9vXoe_VEAYFrDN.png "James (@james_inthe_box) on Twitter photo And another #dridex #opendir from my friend <a href=\"/FewAtoms/\">Few Atoms</a>
swastikengg[.]com/js/revolution-slider/fonts/revicons/")
![#opendir #exes #redline
hxxp://2.56.59[.]42/WW/
<a href="/James_inthe_box/">James</a> <a href="/JAMESWT_MHT/">JAMESWT_MHT</a> <a href="/FewAtoms/">Few Atoms</a>](https://pbs.twimg.com/media/E_1Ywu-VQAIdJEI.jpg "Josh Stroschein | The Cyber Yeti (@jstrosch) on Twitter photo #opendir #exes #redline
hxxp://2.56.59[.]42/WW/
<a href=\"/James_inthe_box/\">James</a> <a href=\"/JAMESWT_MHT/\">JAMESWT_MHT</a> <a href=\"/FewAtoms/\">Few Atoms</a>")
![#opendir #malware
http://squadlegion[.]crabdance[.]com/
<a href="/FewAtoms/">Few Atoms</a>](https://pbs.twimg.com/media/FAXlJW1WUAUpEOE.png "Frost (@fr0s7_) on Twitter photo #opendir #malware
http://squadlegion[.]crabdance[.]com/
<a href=\"/FewAtoms/\">Few Atoms</a>")
