Re Word DDE - infosec companies, you need to be detecting this. Spawns Powershell, payload: https://www.hybrid-analysis.com/sample/7777ccbaaafe4e50f800e659b7ca9bfa58ee7eefe6e4f5e47bc3b38f84e52280?environmentId=100 …
Replying to @GossiTheDog
Nice catch - payload's FormBook: https://www.hybrid-analysis.com/sample/316f0552684bd09310fc8a004991c9b7ac200fb2a9a0d34e59b8bbd30b6dc8ea?environmentId=100 …
5:07 AM - 11 Oct 2017
0 replies
0 retweets
2 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.