Details

_id 5fb6f9526e308a5ed025ff28
reference ['https://urlhaus.abuse.ch/host/sparepartiran.com/', 'https://bazaar.abuse.ch/sample/b038873608088e7d9f054df77e88fa0b9ada18062e5977f57b5278755735cb73/', 'https://twitter.com/abuse_ch/status/1329331388747837443/photo/1', 'https://bazaar.abuse.ch/sample/4ed26280f05b2a930b2439cc4e853cf11c6df47f6654cd0a0a6662df85d7e230/']
md5 []
sha1 []
sha256 ['b038873608088e7d9f054df77e88fa0b9ada18062e5977f57b5278755735cb73', '4ed26280f05b2a930b2439cc4e853cf11c6df47f6654cd0a0a6662df85d7e230']
mail ['andrea@hojokk.com']
ip []
domain ['hojokk.com']
url []
user abuse_ch
tweet Malspam using weaponized XLS to spread AgentTesla 📩 XLS: 📄 https://bazaar.abuse.ch/sample/b038873608088e7d9f054df77e88fa0b9ada18062e5977f57b5278755735cb73/ EXE: 🪲 https://bazaar.abuse.ch/sample/4ed26280f05b2a930b2439cc4e853cf11c6df47f6654cd0a0a6662df85d7e230/ AgentTesla drop-box: 🔥 andrea@hojokk.com Payload hosted on #opendir: 🔍 https://urlhaus.abuse.ch/host/sparepartiran.com/ https://twitter.com/abuse_ch/status/1329331388747837443/photo/1
id 1329331388747837443
retweets 7
link https://twitter.com/abuse_ch/status/1329331388747837443
mentions ['@hojokk']
hashtags ['#opendir']
date 2020-11-19 07:51:15
timestamp 1605768675

Tweet