| _id |
5f08e529353352821661b9ec |
| reference |
['https://gist.github.com/a64b6f1c78ca5307d00d766c36b3d2e3', 'https://www.hybrid-analysis.com/string-search/results/366c98ad4c62f26a254fe120add089fd3a6c27142985d277b04e90e51c03a070'] |
| md5 |
['a64b6f1c78ca5307d00d766c36b3d2e3'] |
| sha1 |
[] |
| sha256 |
['366c98ad4c62f26a254fe120add089fd3a6c27142985d277b04e90e51c03a070'] |
| mail |
[] |
| ip |
[] |
| domain |
[] |
| url |
[] |
| user |
James_inthe_box |
| tweet |
A small #unknown .NET #stealer that's been kicking around for a few months; #snort / #suricata / #yara rule at: https://gist.github.com/a64b6f1c78ca5307d00d766c36b3d2e3 … https://www.hybrid-analysis.com/string-search/results/366c98ad4c62f26a254fe120add089fd3a6c27142985d277b04e90e51c03a070 … all hashes on @mal_share cc @snort @malwareforme @switchingtoguns @ET_Labs @EmergingThreats @travisbgreen pic.twitter.com/aRWh8WWbgK |
| id |
1281706762165350400 |
| retweets |
2 |
| favorites |
7 |
| link |
https://twitter.com/James_inthe_box/status/1281706762165350400 |
| mentions |
['@mal_share', '@snort', '@malwareforme', '@switchingtoguns', '@ET_Labs', '@EmergingThreats', '@travisbgreen'] |
| hashtags |
['#unknown', '#stealer', '#snort', '#suricata', '#yara'] |
| timestamp |
1594417679 |
| date |
2020-07-10 23:47:59 |