L0Psec
Quick one. Shared by @malwrhunterteam: 13e931b95b927b94b950cbc4f67ce17c96d350d81c04f07e523af613ada8397e - scpt file. 1 VT detection. Just uses base64 encoded string piped to bash to exec curl to download (from 172.94.9\.250) and exec next stage. 🧵
