neonprimetime security , just trying to help

  Agent Tesla --------------------------------------------------- date: 5/5/2021 delivery:  Unknown persistence:  scheduled Task, \Updates\S...

  Hagga / Aggah   date:  11/18/2020 delivery:  email [Subject: Order-PO500-18, Attachment: .PPT Powerpoint creates scheduled task] persisten...

  Dridex   date:  11/23/2020 delivery:  email [Subject: Payment Advice, Attachment: .DOC with Office 365 logo, downloads more from hxxps://r...

Zloader   date:  2/26/2021 delivery:  email [Subject: Invoicing info294564, Attachment: .DOC with plain text body asking to enable editing, ...

NJRAT / Bladabindi   date: 2/26/2021 delivery:  email [Subject: Lease Agreement, Attachment: Zip (Lease Agreement.zip) w/ VBS Script inside ...

Qakbot / Qbot   date:  4/15/2021 delivery:  email [Link to Zip w/ XLSM inside , "Docusign logo themed", links (  บางสะพาน[.]com/hG...

- Agent Tesla - Aggah (same as Hagga) -  Ave Maria  (same as Warzone RAT) - Bladabindi (same as NJRAT) - Dridex - Hagga (same as Aggah) - N...