my tweets are severely limited by my lack of understanding of what I am doing.
Seen this yesterday. AV hasn't spotted it Correlated data did.
-
Known info then cool...still looking at the b64 embedded in the binary ( https://www.virustotal.com/file/ba23b1c1b8dc282886babdb2f7c5f9b98a4bc983bbeda77c87905d0b6ebc5c00/analysis/1501156898/ … ) as well as whatthe 439k payload is.
More eyes the better. I don't know how widespread knowledge is in public, these guys have been flying under radar
