Observable: finger.exe
Observable Type: Process Name
Details: Looks like the old finger.exe is being used as a LOLBin for downloading in some new attacks. Might be a a fun hunt!
I’m hunting for this now. Anyone else find anything interesting? Even WTFBins that use finger.exe?