Detected #SmartApeSG infection chain
Compromised site
-->
losartan[.]top/lv/xfa.js (injected)
-->
losartan[.]top/lv/select.js (clickfix)
-->
medthermography[.]com/ddas.php
-->
medthermography[.]com/lebu.zip
-->
94[.]158.245.131:443 (NetSupport, EVALUSION, NSM165348)
b5f248d2bb97c66945ead9a70a20af489c37365d93d5069c9686ecad4c481e0b lebu.zip