That's a great anchor, tons of malicious file samples:https://labs.inquest.net/dfi/search/ext/ext_code/MsTscAxNotSafeForScripting1_OnConnecting …
#MsTscAx (Microsoft Terminal Services Client Control) - OnConnecting is a new VBA macro startup method actively being used by latest #crimeware downloaders. Executes only on W10. https://buff.ly/3aOar3d #malware #DFIRpic.twitter.com/LrSsbLH6ZX
-
-
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
It actually depends on the version mstscax you call. Your sample uses MsRdpClient8NotSafeForScripting (MsTscAxNotSafeForScripting1_OnConnecting) available to >= Win8https://docs.microsoft.com/en-us/windows/win32/termserv/imsrdpclient8 …
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
Good job! This is
#ostap downloaderHvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.