Files packaged with Excel-DNA from which a dll containing 2 urls pointing to Discord is extracted. These download data files and encode them with XOR creating additional DLLs, which initiate the malware infection.
HTS responds to raids by the SAA and Russia. Is a ground operation in sight? Pro-Turkey militias attack population centers west of Hama and south of Idlib. Meanwhile, the Moscow fighters continue to bomb Zawiya
The response of Hayat Tahrir al-Sham (HTS) to the latest attacks by the Syrian army (SAA) and Russia in Idlib was not long in coming. The pro-Turkey militiamen have fired over 50 rockets on the districts of Shataha, Jureen, Na’ourah and Mirza west of Hama. HTS also targeted Khan Shikoon and Ma’ardbsah south of Idlib. In the morning, however, there were news raid by Moscow fighters in Zawiya. In particular, the aircrafts hit an enemy base near the village of al-Hamamah (Jiser al-Shour). The back-and-forth confirms the escalation in the region, which could also see field operations in the near future by the SAA, which has been intent on conquering Barah for months, with Russia’s Close Air Support (CAS). In fact, in the quadrant there is an unusual movement of troops and military vehicles from Damascus.