Hagga / Aggah
date: 11/18/2020
delivery: email [Subject: Order-PO500-18, Attachment: .PPT Powerpoint creates scheduled task]
persistence: scheduled task "lunkicharkhi" that runs downloads VBS script inside blogspot url (madarjaaatresearchers.blogspot[.com/p/thirdsaint3.html) and runs it with MSHTA)
capabilities (per memory strings): unknown
c2s: unknown
special notes: Powerpoint, scheduled task that connects to blogspot url runs VBS with MSHTA
samples:
PPT - https://app.any.run/tasks/c896710d-c2e3-4bba-ba7a-cf801e9544cf/
VB Script - https://app.any.run/tasks/f6b585e9-e906-4882-942c-1bfb6cca666d/
links:
https://twitter.com/neonprimetime/status/1330905903562940427
screenshots:
---------------------------------------------------
Are you in need of finance? we give out guarantee cash at 3% interest rate. Contact us on any kind of finance now: financialserviceoffer876@gmail.com whatsapp Number +918929509036 Dr James Eric Finance Pvt Ltd
ReplyDeleteI was thrown out of my own house was sleeping in a hotel for weeks she also took possession of my son could only see him once a week then I found out she was in love with my accountant all these while so I went online and I came across a Russian private investigator who help me get all my properties and my accounts back even my company back how he did these I don’t know but I gave all the information he asked for and followed all his instructions and now I’m happy my life’s better now.
ReplyDeleteThanks to HACKINTECHNOLOGY@CYBERSERVICES.COM
I just said I should share my own story here
Thank you
I know of a group of private investigators who can help you with they are also hackers but prefer to be called private investigators They can help with your bitcoin issues and your clients will be happy doing business with you,they can also help yo with your bad credit score,hacking into phones,binary recovery,wiping criminal records,increase school score, stolen files in your office or school,blank atm etc. Just name it and you will live a better life
ReplyDeleteContact +1(407) 777-4240
Premiumhackservices@gmail.com
He is the best out there,I tested him and he delivered a good job,he helped me settle bank loans,he also helped my son upgrade his scores at high school final year which made him graduate successfully and he gave my son free scholarship into the college,all I had to do was to settle the bills for the tools on the job,I used $500 to get a job of $50000 done all thanks to Robertson he saved me from all my troubles,sharing this is how I can show gratitude in return for all he has done for me and my family
ReplyDeleteContact premiumhackservices@gmail.com
Text/call +1 (984) 733‑3673
WhatsApp +1 (984) 733‑3673
Telegram +1 (984) 733‑3673
BEST AGENCY TO RECOVER LOST OR STOLEN CRYPTOCURRENCY
ReplyDeleteI recommend Hack Recovery TSUTOMU SHIMOMURA to anyone who needs this service. I decided to get into crypto investing and I lost my crypto to an investor late last year. The guy who was supposed to manage my account was a fraud the whole time. I invested $180,000 and at first my read and profit margins looked good. I got worried when I couldn't make withdrawals and realized I had been tricked. I found some testimonials that people had to say about Hack Recovery TSUTOMU SHIMOMURA and how helpful it was in getting their money back. I immediately contacted him via. Email: tsutomushimomurahacker@gmail.com, Or WhatsApp +1 (806) 283-5031 Telegram +1 (803) 632-0791 and I’m sure you will be happy you did.
I invested everything I had into my crypto portfolio, but unfortunately I became the victim of a well organized scam. A group of scammers used bots and fake crypto platforms that closely resembled legitimate websites, even cloning platforms like CoinMarketCap and Coinbase to make their scheme look authentic.
ReplyDeleteBefore I realized what was happening, I had lost approximately $189,450 in USDC and Bitcoin. It was a devastating experience, and for a while I felt completely lost and unsure about what steps to take next.
A friend of mine, who had faced a similar situation a few years ago, recommended Morphohack Cyber Service. Reaching out to them turned out to be an important step. Their team helped me understand the situation, trace the fraudulent transactions, and work toward recovering my stolen funds.
I was truly impressed by their professionalism, dedication, and the speed with which they handled my case. I’m incredibly grateful for their support during such a difficult time. For anyone who has fallen victim to crypto scams, I highly recommend seeking professional help from experienced and ethical experts like the team at Morphohack. You can reach them only via their official email: Morphohack@CyberServices.Com
FINALLY I GOT MY LOST BITCOIN BACK ALL THANKS TO TSUTOMU SHIMOMURA
ReplyDeleteHello everyone I want to use this Medium to say big thank you to TSUTOMU SHIMOMURA for they helped me recover my stolen crypto worth $285,000 through their hacking skills I tried it I was skeptic but it worked and I got my money back, I’m so glad I came across them early because I thought I was never going to get my money back from those fake online investment websites . You can also contact them by Email address tsutomushimomurahacker@gmail.com, or WhatsApp +1 (806) 283-5031 Telegram +1 (803) 632-0791 and I’m sure you will be happy you did.