Information Stealer Masquerades as LDAPNightmare (CVE-2024-49113) PoC Exploit ================================================================================================================ Indicator Description Detection name ================================================================================================================ ef4ba8eef919251f7502c7e66926bb3a5422065b poc.exe (UPX-packed) TrojanSpy.Win32.FAKEPOC.THAOGBE d4a35487b95cc2b44395047717358bb2863a5311 Dropped PowerShell script Trojan.PS1.FAKEPOC.THAOHBE ftp[:]//ftp[.]drivehq[.]com/wwwhome/ FTP server ftp[:]//ftpupload[.]net/htdocs FTP server hxxps[:]//pastebin[.]com/raw/9TxS7Ldc Pastebin