Event JSON
{
"id": "7b34c401e5576d5443cef256411b4994bae14d676dab22a23dce847109969b04",
"pubkey": "9a0f923f7b227fd9af9e73677f4c2c9cb3f4e518288f600a229e1dab5c0d419a",
"created_at": 1790603774,
"kind": 1,
"tags": [
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/349/007/171/959/642/original/c68cad5786abb8a0.png",
"m image/png"
],
[
"t",
"remcos"
],
[
"t",
"powershell"
],
[
"t",
"opendir"
],
[
"proxy",
"https://infosec.exchange/@james_inthe_box/117349008932971310",
"web"
],
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/349/007/164/926/760/original/4524ac7d67dfa9d7.png",
"m image/png"
],
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/349/007/155/380/075/original/f8f71fd48bddcc5c.png",
"m image/png"
],
[
"proxy",
"https://infosec.exchange/users/james_inthe_box/statuses/117349008932971310",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/james_inthe_box/statuses/117349008932971310",
"pink.momostr"
],
[
"-"
]
],
"content": "#remcos #powershell (albeit broken) #opendir at:\n\nhttps:// delphiaonline\\.top\n\nc2\ndmsi\\.duckdns\\.org:14642\n\n9d9f149a0052999587be2078375bb4530b351f3cda1b343c7f81a5d13b02ac45\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/117/349/007/171/959/642/original/c68cad5786abb8a0.png\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/117/349/007/164/926/760/original/4524ac7d67dfa9d7.png\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/117/349/007/155/380/075/original/f8f71fd48bddcc5c.png\n",
"sig": "ce042af75bc9887c4f49dc755402e88b181632e700e5d13ce3d9a6f04f41f2757f021d39c982b7b5b5887114e838fae0bb16eabab8a7703335d9eaa14b3dbf2d"
}
