Another campaign with CrowdStrike decoy
New_Recovery_Tool_to_help_with_CrowdStrike_issue_impacting_Windows.docm
dd2100dfa067caae416b885637adc4ef
Download & decrypt
mscorsvc.dll
eb29329de4937b34f218665da57bcef4
#stealer
uploads stolen data to
172[.]104[.]160[.]126
#IOC