Few Atoms (@FewAtoms) header
Few Atoms (@FewAtoms) profile picture

Few Atoms

@FewAtoms

One more amateur #malware hunter

Joined January 2018
  • Tweets1.1K
  • Following5
  • Followers4.2K
744Media
Photo by Few Atoms (@FewAtoms)Photo by Few Atoms (@FewAtoms)Photo by Few Atoms (@FewAtoms)Photo by Few Atoms (@FewAtoms)Photo by Few Atoms (@FewAtoms)Photo by Few Atoms (@FewAtoms)Photo by Few Atoms (@FewAtoms)Photo by Few Atoms (@FewAtoms)Photo by Few Atoms (@FewAtoms)Photo by Few Atoms (@FewAtoms)
Few Atoms retweeted
Frost (@fr0s7_) profile picture
Frost@fr0s7_28 Sep 2021
#opendir #malware http://squadlegion[.]crabdance[.]com/ @FewAtoms
Image from Frost (@fr0s7_)
4
11
#opendir #exes #redline hxxp://2.56.59[.]42/WW/ @James_inthe_box @JAMESWT_MHT @FewAtoms
Image from Josh Stroschein | The Cyber Yeti (@jstrosch)
3
12
30
A handful of #dridex #opendir courtesy of my friend @FewAtoms gist.github.com/silence-is-b…
Image from James (@James_inthe_box)
1
10
22
And another #dridex #opendir from my friend @FewAtoms swastikengg[.]com/js/revolution-slider/fonts/revicons/
Image from James (@James_inthe_box)
1
4
14
Few Atoms retweeted
InQuest (@InQuest) profile picture
InQuest@InQuest18 Aug 2021
More #Dridex being delivered from @discord app. A less common @MsftSecIntel coercive lure in the #maldoc Dridex payload URL: hxxps://cdn.discordapp[.]com/attachments/877498008575549440/877498048991858688/11.dll @fr0s7_ @FewAtoms @500mk500 @abuse_ch 😉 labs.inquest.net/dfi/sha256/…
Image from InQuest (@InQuest)
1
6
12
Another set of #dridex #opendir 's thanks to @FewAtoms gist.github.com/silence-is-b…
Image from James (@James_inthe_box)
3
7
1
26
Another mass of #dridex #opendir 's found by my friend @FewAtoms gist.github.com/silence-is-b…
Image from James (@James_inthe_box)
2
16
2
44
A nice #dridex #opendir found by @FewAtoms at: demo.usa-mycard[.]com/sql/ dll hashes: 48d267f875bca7301f079a283305cba11ec8106e9ed76758c780ddb2cf847a59 966795489278e05ad878d4d25381cdb32131987766700eb7c0cb65731838019d c2's: 137.74.112.43 216.108.227.55 94.177.176.51
Image from James (@James_inthe_box)
3
13
1
28
Few Atoms retweeted
InQuest (@InQuest) profile picture
InQuest@InQuest22 Jul 2021
Quite a trove of #phishing documents spanning months hiding in this #opendir hxxp://www.x454[.]com/wp-content/plugins/super-forms/uploads/php/files/ @FewAtoms @PhishTank_Bot
Image from InQuest (@InQuest)
3
4
A very small dll dropper...good for studying: app.any.run/tasks/5eaa0408-a… cc @FewAtoms
Image from James (@James_inthe_box)
4
20
Few Atoms retweeted
Frost (@fr0s7_) profile picture
Frost@fr0s7_30 Jun 2021
#malware #opendir @FewAtoms @James_inthe_box
Image from Frost (@fr0s7_)
1
8
1
19
Replying to @InQuest
#opendir
Image from James (@James_inthe_box)
1
2
2
Some #guloader in this #opendir: http://ztechinternational[.]com/Img cc @FewAtoms @abuse_ch
Image from James (@James_inthe_box)
3
1
13
Few Atoms retweeted
lc4m (@luc4m) profile picture
lc4m@luc4m3 Jun 2021
looking at "blessup".. #dotnet #malware 🧐🧐🧐 @mal_share-> d3444e2455ec7c3120279e1848a12810 unpacked-> 5ddc671d78d7508813741d9e1004cb86 h/t: @FewAtoms @malwrhunterteam @James_inthe_box @malware_traffic @makflwana @bad_packets @VK_Intel @HazMalware @abuse_ch @DissectMalware
Image from lc4m (@luc4m)
Image from lc4m (@luc4m)
Image from lc4m (@luc4m)
Image from lc4m (@luc4m)
Few Atoms (@FewAtoms) profile pictureFew Atoms@FewAtoms1 Jun 2021
#malware #threathunting #cybersecurity #opendir #infosecurity hxxp://13.212.176.2/bless/ hxxp://13.212.176.2/blessup/ hxxp://13.212.176.2/vibez/ urlhaus.abuse.ch/host/13.212… @abuse_ch @James_inthe_box @JAMESWT_MHT
Image from Few Atoms (@FewAtoms)
2
7
23
#malware #opendir https://eer-trading[.]com/cgi/ #agenttesla cc @FewAtoms @abuse_ch
Image from James (@James_inthe_box)
1
6
14
#opendir #powershell with embedded #xloader at: http://149.28.255[.]25/non
Image from James (@James_inthe_box)
1
4
1
13
#malware #opendir at: seychelless[.]ml cc @abuse_ch @FewAtoms
Image from James (@James_inthe_box)
1
5
24
#malware #opendir http://madagascar-green-island-discovery[.]com/Img/ cc @FewAtoms
Image from James (@James_inthe_box)
2
3
22
🚨 Digging into the #spymax #rat 📱🔎👀 🖥️C2: 45.77.9.151:4444 Network protocol 📡 dissection and more below ⚙️ ht: @FewAtoms cc: @malwrhunterteam @James_MHT 👇👇👇 xitter.gq/fewatoms/status/138199…
Image from 💥 𝕭𝖑4𝖈𝖐𝖍0𝖑3𝖟 👾 (@bl4ckh0l3z)
Image from 💥 𝕭𝖑4𝖈𝖐𝖍0𝖑3𝖟 👾 (@bl4ckh0l3z)
Image from 💥 𝕭𝖑4𝖈𝖐𝖍0𝖑3𝖟 👾 (@bl4ckh0l3z)
Image from 💥 𝕭𝖑4𝖈𝖐𝖍0𝖑3𝖟 👾 (@bl4ckh0l3z)
Few Atoms (@FewAtoms) profile pictureFew Atoms@FewAtoms13 Apr 2021
#malware #threathunting #cybersecurity #opendir #infosecurity hxxp://45.77.9.151/ @bl4ckh0l3z at your request
Image from Few Atoms (@FewAtoms)
1
17
2
36
It's definitely newly coded #elf #linux #botnet. Never seen one's typically coded like this. Here's bot update's function I #RE. Enjoy! Practically I've reversed all of it now. You all can use this logic to #OSINT similar source code. Happy hunting!! #malwaremustdie #linuxmalware
Image from ☩MalwareMustDie (@malwaremustdie)
1
17
27
Load more