Details

_id 5f99f8656e308a5ed025dad3
reference ['https://otx.alienvault.com/indicator/yara/c1218cdf183803c92553b0898d8d507b82035abc']
md5 []
sha1 ['c1218cdf183803c92553b0898d8d507b82035abc']
sha256 []
mail []
ip []
domain []
url []
user BitsOfBinary
tweet A rule to detect these samples can be found here: https://otx.alienvault.com/indicator/yara/c1218cdf183803c92553b0898d8d507b82035abc Written by the folks at AlienVault. this rule captures the unique string "Cookie: _ga= %s%02d%d%d%02d%s" which is being reused across #Manuscrypt samples by #Lazarus.
id 1321492994235736065
retweets 0
link https://twitter.com/BitsOfBinary/status/1321492994235736065
mentions []
hashtags ['#Manuscrypt', '#Lazarus']
date 2020-10-28 16:44:16
timestamp 1603899856

Tweet