Obfuscation method highlighted to expose payload from last tweets sample: https://www.virustotal.com/en/file/f945105f5a0bc8ea0d62a28ee62883ffc14377b6abec2d0841e88935fd8902d3/analysis/ … (11/59 AV Detection)pic.twitter.com/LbKblj6i00
You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
Yeap, these popped up quite soon as well, have seen them before, but not like this (just the word 'DDEAUTO' splitting). Nice catch!