Where's the initial payload?
-
-
Replying to @jedisct11 reply 0 retweets 0 likes
-
-
Replying to @jedisct1 @JAMESWT_MHT2 replies 0 retweets 1 like
-
https://malwr.com/analysis/YzhkOWM5ZWMzNjIxNDBmZWFkOGFjMDEzMjlkMjRhYjI/share/3aa914323f374c3fb62bffb982a3b29e … (from private analysis, but shared)
2 replies 0 retweets 0 likes -
just uploaded to reverse.it too
1 reply 0 retweets 0 likes -
it seems that this sample is able to play sound: http://198.50.143.\38/pages/alert.asp :D
2 replies 0 retweets 1 like -
Woah. A new fad introduced by Cerber? That's cool. 198.50.143.\38 seems to be down ATM, though.
1 reply 0 retweets 0 likes -
-
up for me too
1 reply 0 retweets 0 likes
up for me as well now. That's one pretty lame sound. Was expecting something like Cerber.
6:23 AM - 13 Jun 2016
0 replies
0 retweets
1 like
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.