| _id |
62ea1d47348d24c6a7972b5e |
| reference |
['https://labs.inquest.net/dfi/hash/f85f25732ee7eaa1e010c02b433c4a1ad4c91c1542fe1002722eb9703ecbf491'] |
| md5 |
[] |
| sha1 |
[] |
| sha256 |
['e2e6dc45dee5e6a3001f8435367f4bec828b5a0f28a7cdcb436b659128d9b24f', 'f85f25732ee7eaa1e010c02b433c4a1ad4c91c1542fe1002722eb9703ecbf491'] |
| mail |
[] |
| ip |
['192.210.219.10'] |
| domain |
[] |
| url |
['http://192.210.219.10/swiss/trn13/rcp_copy.doc?&'] |
| user |
InQuest |
| tweet |
🤖 Potentially malicious RTF document found hosted at:
hxxp://192.210.219.10/swiss/trn13/rcp_copy.doc?&amp
SHA256: e2e6dc45dee5e6a3001f8435367f4bec828b5a0f28a7cdcb436b659128d9b24f
IOC extracted from sample: https://labs.inquest.net/dfi/hash/f85f25732ee7eaa1e010c02b433c4a1ad4c91c1542fe1002722eb9703ecbf491
(Automated Tweet. maybe a FP) |
| id |
1554395950390681600 |
| retweets |
1 |
| link |
https://twitter.com/InQuest/status/1554395950390681600 |
| mentions |
[] |
| hashtags |
[] |
| date |
2022-08-02 09:17:28 |
| timestamp |
1659457048 |