Details

_id 5fb8fb024d1f714726bd997d
reference ['https://bazaar.abuse.ch/sample/b70d94fd7da398d1d9a9bb0824bfea4009c441a0852a004fbed4b44c43ee8948/', 'https://twitter.com/ffforward/status/1329692611880378369/photo/1', 'https://bazaar.abuse.ch/sample/fd521190e36009a7fafea228266b37eda5cbaec650769ecf2d227eb02f8ebae5/', 'https://urlhaus.abuse.ch/url/836002/']
md5 []
sha1 []
sha256 ['b70d94fd7da398d1d9a9bb0824bfea4009c441a0852a004fbed4b44c43ee8948', 'fd521190e36009a7fafea228266b37eda5cbaec650769ecf2d227eb02f8ebae5']
mail ['anonymous@mkr.net.au']
ip []
domain ['mail.mkr.net.au', 'mkr.net.au']
url []
user ffforward
tweet #AgentTesla via .pps https://bazaar.abuse.ch/sample/b70d94fd7da398d1d9a9bb0824bfea4009c441a0852a004fbed4b44c43ee8948/ ⏬ https://urlhaus.abuse.ch/url/836002/ (#OpenDir) https://bazaar.abuse.ch/sample/fd521190e36009a7fafea228266b37eda5cbaec650769ecf2d227eb02f8ebae5/ Exfils to anonymous@mkr.net.au via /mail.mkr.net.au Abuses @hypothes_is to proxy download cc @JAMESWT_MHT @James_inthe_box @JRoosen https://twitter.com/ffforward/status/1329692611880378369/photo/1
id 1329692611880378369
retweets 8
link https://twitter.com/ffforward/status/1329692611880378369
mentions ['@mkr', '@hypothes_is', '@JAMESWT_MHT', '@James_inthe_box', '@JRoosen']
hashtags ['#AgentTesla', '#OpenDir']
date 2020-11-20 07:46:37
timestamp 1605854797

Tweet