概述

近期，奇安信威胁情报中心红雨滴团队利用公开情报发现一个摩诃草团伙的XLSM诱饵文档样本，经过分析发现其载荷主要通过 Github 和 Feed43获取加密的 C3癬??^a;?筛2018-12-17T06:50:14yusufk1185.29.11.592019-01-15T08:03:17str1ngstr164.132.75.222019-03-01T05:28:04z00min193.22.98.172019-05-27T05:47:11alexboycott91.92.136.2392019-06-24T11:14:16imrankhan71391.92.136.2392019-06-24T12:05:21imranikhan17185.116.210.82019-07-18T10:35:43chrisyoks185.161.210.82019-07-18T12:10:48johnhenery12139.28.38.2312019-08-07T10:58:56petersonmike139.28.38.2362019-08-08T09:06:03shaikmalik22

参考资料

1. https://securelist.com/the-dropping-elephant-actor/75328/