Details

_id 62ecc042348d24c6a7972d30
reference ['https://bazaar.abuse.ch/sample/f1367f5f01928295dbf20fff7b775173da82b91d4b58a9eb4d6832a6268656ca/']
md5 []
sha1 []
sha256 ['f1367f5f01928295dbf20fff7b775173da82b91d4b58a9eb4d6832a6268656ca']
mail []
ip []
domain []
url []
user k3dg3
tweet #NetSupport RAT dropped from a very Qbot-ish distro. thread hijacked email -> Google Drive URL (DOWNLOAD DOCUMENT hyperlink)-> zip (pass-protected) -> LNK -> PS -> payload https://bazaar.abuse.ch/sample/f1367f5f01928295dbf20fff7b775173da82b91d4b58a9eb4d6832a6268656ca/
id 1555241426606297088
retweets 3
link https://twitter.com/k3dg3/status/1555241426606297088
mentions []
hashtags ['#NetSupport']
date 2022-08-04 17:17:05
timestamp 1659658625

Tweet