Details

_id 5fb99c434d1f714726bd9b37
reference ['https://twitter.com/jameswt_mht/status/1330255276172251137/photo/1', 'https://bazaar.abuse.ch/sample/3b1dc7e0c9154fe384c695f8eec5622ab2ba88bf59d990def6b2c11d8519cecf/', 'https://bazaar.abuse.ch/sample/2caacde56329c3cb26c041d2535a5121d02fc195193f4046aabec42d61655d68/']
md5 []
sha1 []
sha256 ['2caacde56329c3cb26c041d2535a5121d02fc195193f4046aabec42d61655d68', '3b1dc7e0c9154fe384c695f8eec5622ab2ba88bf59d990def6b2c11d8519cecf']
mail []
ip ['45.90.218.220']
domain []
url ['45.90.218.220:8000/Setup.exe']
user JAMESWT_MHT
tweet @malwrhunterteam #FormGrabber @IntezerLabs > #ModiLoader @hatching_io 45.90.218.220:8000/Setup.exe yet drop #signed "Traves Dreams" https://bazaar.abuse.ch/sample/2caacde56329c3cb26c041d2535a5121d02fc195193f4046aabec42d61655d68/ previous #signed "Smart Line Logistics" https://bazaar.abuse.ch/sample/3b1dc7e0c9154fe384c695f8eec5622ab2ba88bf59d990def6b2c11d8519cecf/ cc @Arkbird_SOLG @fr0s7_ @vxintel @sugimu_sec @verovaleros @VK_Intel https://twitter.com/JAMESWT_MHT/status/1330255276172251137/photo/1
id 1330255276172251137
retweets 4
link https://twitter.com/JAMESWT_MHT/status/1330255276172251137
mentions ['@malwrhunterteam', '@IntezerLabs', '@hatching_io', '@Arkbird_SOLG', '@fr0s7_', '@vxintel', '@sugimu_sec', '@verovaleros', '@VK_Intel']
hashtags ['#FormGrabber', '#ModiLoader', '#signed', '#signed']
date 2020-11-21 21:02:27
timestamp 1605988947

Tweet