Pure Reactions

@alexsevtsov lastline.com/labsblog/smoke-… Just came across a doc with almost exact macro structure as in this blog post: It drops Imminent RAT virustotal.com/#/file/d89153… @James_inthe_box @_jsoo_ @ImPureMotion @securitydoggo @tlansec @eyalsela @blu3_team

@JAMESWT_MHT hybrid-analysis.com/sample/8… Is this testing??

@JAMESWT_MHT What is this? cc07cb492c35fa933c209c91461d927bec132d0af2a135f8c4a46fb464681b79

@shu_tom could you follow me, so I could share an interesting sample to ping you that is relevant to a recent article you wrote. thanks

@jiboutin Did you get a chance to check out that MD5? It's def drop Buhtrap. I have evidence another victim.

@unpacker you posted something about buhtrap.. i've seen this variant in another business sector than financial institution..