[ikolor]

thanks .

https://www.virustotal.com/en/file/ef09 ... 500820185/

[xors]

thanks .

https://www.virustotal.com/en/file/ef09 ... 500820185/

CVE-2017-0199. Downloads from:
hxxp://dev.null.vg/sCjByat5.hta

[Antelox]

thanks .

https://www.virustotal.com/en/file/ef09 ... 500820185/

CVE-2017-0199. Downloads from:
hxxp://dev.null.vg/sCjByat5.hta

Yes, which in turn downloads LuminosityLink RAT from:

Code: Select all

hxxp://subaat.com/files/714.exe

https://www.virustotal.com/en/file/3414 ... 2/analysis

BR,

Antelox