TSXV:CYX.H - Post by User
Comment by
Sidesh0won Mar 06, 2018 12:28am
143 Views
Post# 27665621
RE:Malware
RE:MalwareIf anyone opened the CYX.hta file that was in the post, I found an article that confirms that it did a reverse-http to 31.41.220.9. To reveal the code in the hta file (that I posted) you need to open it in notepad, and do a base64 decode of the encoded text. It is black hat code, and well-written.