Overview

overview

1

Static

static

1

URLScan

urlscan

http://<div class="f...

windows10-1703-x64

1

http://<div class="f...

windows7-x64

1

http://<div class="f...

windows10-2004-x64

1

http://<div class="f...

android-9-x86

1

http://<div class="f...

android-10-x64

1

http://<div class="f...

android-11-x64

1

Analysis

  • max time kernel
    100s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2023, 14:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    http://<div class="full-page"> <div class="home-summary"><div class="row"> <h2 class="home-subtitle"> 28 day summary <small>with change over previous period</small> </h2> <div class="home-summary-wrap"><div class="row"> <div class="col-md-10"> <div class="home-summary-panel"> <div class="home-summary-metric DataPoint" data-metric="tweets" title="85"> <div class="DataPoint-label">Tweets</div> <div class="DataPoint-info">85 <span class="DataPoint-trend DataPoint-trend--positive">8,400.0%</span> </div> <div class="home-summary-chart"><svg width="100%" height="100%"><line class="baseline" x1="-86079.57142857143" x2="118.14285714285715" y1="15" y2="15"></line><path class="sparkline" d="M3,15L7.428571428571428,15L11.857142857142856,15L16.285714285714285,15L20.71428571428571,15L25.142857142857142,15L29.571428571428573,15L34,15L38.42857142857142,15L42.85714285714286,15L47.285714285714285,14.555555555555557L51.714285714285715,15L56.142857142857146,15L60.57142857142858,15L65,13.666666666666666L69.42857142857143,15L73.85714285714285,15L78.28571428571429,15L82.71428571428572,14.555555555555557L87.14285714285715,15L91.57142857142857,15L96,15L100.42857142857143,13.666666666666666L104.85714285714286,15L109.28571428571429,3L113.71428571428572,4.777777777777779L118.14285714285715,3"></path><circle class="endpoint" cx="118.14285714285715" cy="3" r="3"></circle></svg></div> </div> <div class="home-summary-metric DataPoint" data-metric="tweetviews" title="891"> <div class="DataPoint-label">Tweet impressions</div> <div class="DataPoint-info">891 <span class="DataPoint-trend DataPoint-trend--positive">4,142.9%</span> </div> <div class="home-summary-chart"><svg width="100%" height="100%"><line class="baseline" x1="-86079.57142857143" x2="122.57142857142857" y1="15" y2="15"></line><path class="sparkline" d="M3,15L7.428571428571428,15L11.857142857142856,15L16.285714285714285,15L20.71428571428571,15L25.142857142857142,15L29.571428571428573,15L34,15L38.42857142857142,15L42.85714285714286,15L47.285714285714285,14.933147632311979L51.714285714285715,14.96657381615599L56.142857142857146,14.933147632311979L60.57142857142858,15L65,14.766016713091922L69.42857142857143,14.96657381615599L73.85714285714285,14.96657381615599L78.28571428571429,14.899721448467965L82.71428571428572,15L87.14285714285715,14.96657381615599L91.57142857142857,15L96,14.96657381615599L100.42857142857143,14.799442896935933L104.85714285714286,15L109.28571428571429,3L113.71428571428572,9.15041782729805L118.14285714285715,6.610027855153202L122.57142857142857,12.2924791086351"></path><circle class="endpoint" cx="122.57142857142857" cy="12.2924791086351" r="3"></circle></svg></div> </div> <div class="home-summary-metric DataPoint" data-metric="profileviews" title="265"> <div class="DataPoint-label">Profile visits</div> <div class="DataPoint-info">265 <span class="DataPoint-trend DataPoint-trend--positive">1,792.9%</span> </div> <div class="home-summary-chart"><svg width="100%" height="100%"><line class="baseline" x1="-86079.57142857143" x2="118.14285714285715" y1="15" y2="15"></line><path class="sparkline" d="M3,15L7.428571428571428,15L11.857142857142856,15L16.285714285714285,15L20.71428571428571,15L25.142857142857142,15L29.571428571428573,15L34,15L38.42857142857142,15L42.85714285714286,15L47.285714285714285,15L51.714285714285715,15L56.142857142857146,15L60.57142857142858,15L65,15L69.42857142857143,15L73.85714285714285,15L78.28571428571429,14.612903225806452L82.71428571428572,15L87.14285714285715,15L91.57142857142857,15L96,15L100.42857142857143,15L104.85714285714286,15L109.28571428571429,3L113.71428571428572,10.664516129032258L118.14285714285715,11.206451612903226"></path><circle class="endpoint" cx="118.14285714285715" cy="11.206451612903226" r="3"></circle></svg></div> </div> <div class="home-summary-metric DataPoint" data-metric="followers" title="4"> <div class="DataPoint-label">Followers</div> <div class="DataPoint-info">4 <span class="DataPoint-trend DataPoint-trend--positive">3</span> </div> <div class="home-summary-chart"><svg width="100%" height="100%"><line class="baseline" x1="-86079.57142857143" x2="122.57142857142857" y1="15" y2="15"></line><path class="sparkline" d="M3,15L7.428571428571428,15L11.857142857142856,15L16.285714285714285,15L20.71428571428571,15L25.142857142857142,15L29.571428571428573,15L34,15L38.42857142857142,15L42.85714285714286,15L47.285714285714285,19L51.714285714285715,19L56.142857142857146,19L60.57142857142858,19L65,19L69.42857142857143,19L73.85714285714285,19L78.28571428571429,19L82.71428571428572,19L87.14285714285715,19L91.57142857142857,19L96,19L100.42857142857143,19L104.85714285714286,19L109.28571428571429,19L113.71428571428572,19L118.14285714285715,19L122.57142857142857,3"></path><circle class="endpoint" cx="122.57142857142857" cy="3" r="3"></circle></svg></div> </div> </div> </div> </div> </div> </div> </div> <div class="home-content" data-earliest="1666470888792"> <div class="home-page" data-start="1680307200000" data-end="1681862399999"> <div class="row"> <h4 class="home-dateline"> Apr 2023 <small class="home-dateline-separator">•</small> <small> 18 days so far... </small> </h4> </div> <div class="home-columns"> <div class="home-column-primary"> <h5 class="home-group-header organic">Tweet Highlights</h5> <div class="has-data-column home-group"> <div class="home-group-column"> <div class="home-panel-wrap" data-endpoint="top_tweets" data-type="top_tweet"><div class="home-panel typed organic"> <div class="home-panel-content"> <h2 class="home-panel-title">Top Tweet <small> earned 57 impressions </small> </h2> </div> <div class="home-panel-content"> <div class="tweet-container"> <div class="tweet-details"> <span dir="ltr" class="tweet-text"><a href="https://twitter.com/CERT_Polska_en" target="_blank" class="twitter-atreply pretty-link js-nav" dir="ltr" data-mentioned-user-id="103005548">@<b class="p-nickname">CERT_Polska_en</b></a> <a href="https://t.co/ByQSpUYQwh" target="_blank" rel="nofollow noopener" dir="ltr" data-expanded-url="https://www.hybrid-analysis.com/sample/b0233cc9cbf35d7816fca35cccd0ac8502edff8d105e745538620a44ee8d4445" class="twitter-timeline-link" title="https://www.hybrid-analysis.com/sample/b0233cc9cbf35d7816fca35cccd0ac8502edff8d105e745538620a44ee8d4445"><span class="tco-display">hybrid-analysis.com/sample/b0233cc</span><span class="tco-ellipsis"><span class="hidden">&nbsp;</span>…</span></a></span> </div> </div> <div class="tweet-metrics-container"> <span class="tweet-metric"><span class="Icon Icon--retweet"></span> 1</span> </div> </div> <div class="home-panel-footer"> <a class="home-panel-link pull-right" href="/user/KulinskiArkadi/tweets">View all Tweet activity</a> <button type="button" class="btn open-tweet-sheet" data-tweet-id="1647072121414139904">View Tweet activity</button> </div> </div> </div> <div class="home-panel-wrap" data-endpoint="top_follower" data-type="top_follower"><div class="home-panel organic"> <div class="home-panel-content"> <h2 class="home-panel-title">Top Follower <small> followed by 504 people </small> </h2> </div> <div class="home-panel-content wide"> <div class="profile-card"> <a class="profile-card-bg" href="https://twitter.com/alanala76010655" target="_blank" style=" background-color: #1DA1F2; background-image: url(https://pbs.twimg.com/profile_banners/947390817223634944/1678588629/600x200);"> </a> <div class="profile-card-content"> <a class="profile-card-avatar-link" href="https://twitter.com/alanala76010655" target="_blank" title="A"> <img class="profile-card-avatar-image" src="https://pbs.twimg.com/profile_images/1634670072471101445/MsSuldrZ_bigger.jpg" alt=""> </a> <div class="profile-card-user-fields"> <div class="profile-card-name"> <div class=""> <a class="profile-card-name-link" href="https://twitter.com/alanala76010655" target="_blank" dir="ltr">A</a> </div> </div> <div class="profile-card-screenname"> <a href="https://twitter.com/alanala76010655" target="_blank" class="profile-card-screenname-link" dir="ltr">@<span>alanala76010655</span></a> <span class="profile-card-follows-status">follows you</span> </div> <p class="profile-card-bio" dir="ltr">Passion for Life Cryptocurrency Analyst </p> </div> </div> </div> </div> <div class="home-panel-footer"> <a class="view-profile-link" href="https://twitter.com/alanala76010655/" target="_blank">View profile</a> </div> </div> </div> <div class="home-panel-wrap loading" data-endpoint="top_tweets" data-type="top_card_tweet"></div> </div> <div class="home-group-column"> <div class="home-panel-wrap" data-endpoint="top_tweets" data-type="top_media_tweet"><div class="home-panel typed organic"> <div class="home-panel-content"> <h2 class="home-panel-title">Top media Tweet <small> earned 56 impressions </small> </h2> </div> <div class="home-panel-content"> <div class="tweet-container"> <div class="tweet-details"> <span dir="ltr" class="tweet-text"><a href="https://twitter.com/keydet89" target="_blank" class="twitter-atreply pretty-link js-nav" dir="ltr" data-mentioned-user-id="880535878724009985">@<b class="p-nickname">keydet89</b></a> <a href="https://t.co/ZWG0oCiyna" target="_blank" rel="nofollow noopener" dir="ltr" data-expanded-url="http://Virustotal.com" class="twitter-timeline-link" title="http://Virustotal.com"><span class="tco-display">Virustotal.com</span><span class="tco-ellipsis"><span class="hidden">&nbsp;</span></span></a> ? <a href="https://t.co/CwT811OCls" target="_blank" rel="nofollow noopener" dir="ltr" data-expanded-url="https://www.hybrid-analysis.com/sample/bfc165a28a2d66a4e48bb645417fa6517c57fd1ff425b64b8593c40c689fca40/5b37b69c7ca3e1547d24dc18" class="twitter-timeline-link" title="https://www.hybrid-analysis.com/sample/bfc165a28a2d66a4e48bb645417fa6517c57fd1ff425b64b8593c40c689fca40/5b37b69c7ca3e1547d24dc18"><span class="tco-display">hybrid-analysis.com/sample/bfc165a</span><span class="tco-ellipsis"><span class="hidden">&nbsp;</span>…</span></a> <a href="https://t.co/JxCpRAXckT" target="_blank" class="twitter-timeline-link" data-pre-embedded="true" dir="ltr">pic.twitter.com/JxCpRAXckT</a></span> </div> </div> <a href="https://twitter.com/KulinskiArkadi/status/1647152113057951748" target="_blank"> <div class="tweet-media-container js-media-container modal-tweet"> <div class="cards-base cards-multimedia"> <div class="multi-photos photos-3"> <div class="multi-photo photo-1 media-thumbnail twitter-timeline-link" data-url="https://pbs.twimg.com/media/FtvcG1uXsAA8baW.jpg:large" data-resolved-url-large="https://pbs.twimg.com/media/FtvcG1uXsAA8baW.jpg:large"> <img src="https://pbs.twimg.com/media/FtvcG1uXsAA8baW.jpg:large" style="top: -46.40884%; width: 100%; height: auto;"> </div> <div class="multi-photo photo-2 media-thumbnail twitter-timeline-link" data-url="https://pbs.twimg.com/media/FtvcG2_XwAEhEVh.jpg:large" data-resolved-url-large="https://pbs.twimg.com/media/FtvcG2_XwAEhEVh.jpg:large"> <img src="https://pbs.twimg.com/media/FtvcG2_XwAEhEVh.jpg:large" style="top: -150.5747%; width: 100%; height: auto;"> </div> <div class="multi-photo photo-3 media-thumbnail twitter-timeline-link" data-url="https://pbs.twimg.com/media/FtvcG9CWcAAOE-i.jpg:large" data-resolved-url-large="https://pbs.twimg.com/media/FtvcG9CWcAAOE-i.jpg:large"> <img src="https://pbs.twimg.com/media/FtvcG9CWcAAOE-i.jpg:large" style="top: -150.5747%; width: 100%; height: auto;"> </div> </div> </div> </div> </a> <div class="tweet-metrics-container"> <span class="tweet-metric"><span class="Icon Icon--retweet"></span> 1</span> </div> </div> <div class="home-panel-footer"> <a class="home-panel-link pull-right" href="/user/KulinskiArkadi/tweets">View all Tweet activity</a> <button type="button" class="btn open-tweet-sheet" data-tweet-id="1647152113057951748">View Tweet activity</button> </div> </div> </div> </div> </div> <div class="no-data-column invisible"> </div> </div> <div class="home-column-secondary"> <div class="home-group-row" data-endpoint="panels" data-type="advertiser"><h5 class="home-group-header ads">Advertise on Twitter</h5> <div class="home-panel ads"> <div class="home-panel-body"> <div class="home-panel-content"> <img class="home-panel-graphic" width="61" height="61" src="https://ton.twimg.com/insights/img/ads_badge_2x.cf5b185c0dbff6e489211f16b723bec9.png"> <h2 class="home-panel-title">Get your Tweets in front of more people</h2> <p class="home-panel-info-insight"> Promoted Tweets and content open up your reach on Twitter to more people. </p> </div> <div class="home-panel-footer"> <a target="_blank" class="btn btn-primary" href="https://ads.twitter.com/login?ref=gl-an-br-anly&amp;redirect_to_payments=true">Get started</a> </div> </div> </div> </div> <div class="home-group-row"> <h5 class="home-group-header">Apr 2023 Summary</h5> <div data-endpoint="page_summary" data-type="page_summary" class=""><div class="home-pagesummary"> <div class="home-summary-metric col-md-6"> <div class="DataPoint DataPoint--withBottomBorder"> <h3 class="DataPoint-label">Tweets</h3> <div class="DataPoint-info metric-tweets">85</div> </div> </div> <div class="home-summary-metric col-md-6"> <div class="DataPoint DataPoint--withBottomBorder"> <h3 class="DataPoint-label">Tweet impressions</h3> <div class="DataPoint-info metric-tweetviews">891</div> </div> </div> <div class="home-summary-metric col-md-6"> <div class="DataPoint DataPoint--withBottomBorder"> <h3 class="DataPoint-label">Profile visits</h3> <div class="DataPoint-info metric-profile-views">265</div> </div> </div> <div class="home-summary-metric col-md-6"> <div class="DataPoint DataPoint--withBottomBorder"> <h3 class="DataPoint-label">New followers</h3> <div class="DataPoint-info metric-followers">0</div> </div> </div> </div> </div> </div> </div> </div> </div></div> </div>

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 30 IoCs
    adwarespyware
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" "http://<div class="full-page"> <div class="home-summary"><div class="row"> <h2 class="home-subtitle"> 28 day summary <small>with change over previous period</small> </h2> <div class="home-summary-wrap"><div class="row"> <div class="col-md-10"> <div class="home-summary-panel"> <div class="home-summary-metric DataPoint" data-metric="tweets" title="85"> <div class="DataPoint-label">Tweets</div> <div class="DataPoint-info">85 <span class="DataPoint-trend DataPoint-trend--positive">8,400.0%</span> </div> <div class="home-summary-chart"><svg width="100%" height="100%"><line class="baseline" x1="-86079.57142857143" x2="118.14285714285715" y1="15" y2="15"></line><path class="sparkline" d="M3,15L7.428571428571428,15L11.857142857142856,15L16.285714285714285,15L20.71428571428571,15L25.142857142857142,15L29.571428571428573,15L34,15L38.42857142857142,15L42.85714285714286,15L47.285714285714285,14.555555555555557L51.714285714285715,15L56.142857142857146,15L60.57142857142858,15L65,13.666666666666666L69.42857142857143,15L73.85714285714285,15L78.28571428571429,15L82.71428571428572,14.555555555555557L87.14285714285715,15L91.57142857142857,15L96,15L100.42857142857143,13.666666666666666L104.85714285714286,15L109.28571428571429,3L113.71428571428572,4.777777777777779L118.14285714285715,3"></path><circle class="endpoint" cx="118.14285714285715" cy="3" r="3"></circle></svg></div> </div> <div class="home-summary-metric DataPoint" data-metric="tweetviews" title="891"> <div class="DataPoint-label">Tweet impressions</div> <div class="DataPoint-info">891 <span class="DataPoint-trend DataPoint-trend--positive">4,142.9%</span> </div> <div class="home-summary-chart"><svg width="100%" height="100%"><line class="baseline" x1="-86079.57142857143" x2="122.57142857142857" y1="15" y2="15"></line><path class="sparkline" d="M3,15L7.428571428571428,15L11.857142857142856,15L16.285714285714285,15L20.71428571428571,15L25.142857142857142,15L29.571428571428573,15L34,15L38.42857142857142,15L42.85714285714286,15L47.285714285714285,14.933147632311979L51.714285714285715,14.96657381615599L56.142857142857146,14.933147632311979L60.57142857142858,15L65,14.766016713091922L69.42857142857143,14.96657381615599L73.85714285714285,14.96657381615599L78.28571428571429,14.899721448467965L82.71428571428572,15L87.14285714285715,14.96657381615599L91.57142857142857,15L96,14.96657381615599L100.42857142857143,14.799442896935933L104.85714285714286,15L109.28571428571429,3L113.71428571428572,9.15041782729805L118.14285714285715,6.610027855153202L122.57142857142857,12.2924791086351"></path><circle class="endpoint" cx="122.57142857142857" cy="12.2924791086351" r="3"></circle></svg></div> </div> <div class="home-summary-metric DataPoint" data-metric="profileviews" title="265"> <div class="DataPoint-label">Profile visits</div> <div class="DataPoint-info">265 <span class="DataPoint-trend DataPoint-trend--positive">1,792.9%</span> </div> <div class="home-summary-chart"><svg width="100%" height="100%"><line class="baseline" x1="-86079.57142857143" x2="118.14285714285715" y1="15" y2="15"></line><path class="sparkline" d="M3,15L7.428571428571428,15L11.857142857142856,15L16.285714285714285,15L20.71428571428571,15L25.142857142857142,15L29.571428571428573,15L34,15L38.42857142857142,15L42.85714285714286,15L47.285714285714285,15L51.714285714285715,15L56.142857142857146,15L60.57142857142858,15L65,15L69.42857142857143,15L73.85714285714285,15L78.28571428571429,14.612903225806452L82.71428571428572,15L87.14285714285715,15L91.57142857142857,15L96,15L100.42857142857143,15L104.85714285714286,15L109.28571428571429,3L113.71428571428572,10.664516129032258L118.14285714285715,11.206451612903226"></path><circle class="endpoint" cx="118.14285714285715" cy="11.206451612903226" r="3"></circle></svg></div> </div> <div class="home-summary-metric DataPoint" data-metric="followers" title="4"> <div class="DataPoint-label">Followers</div> <div class="DataPoint-info">4 <span class="DataPoint-trend DataPoint-trend--positive">3</span> </div> <div class="home-summary-chart"><svg width="100%" height="100%"><line class="baseline" x1="-86079.57142857143" x2="122.57142857142857" y1="15" y2="15"></line><path class="sparkline" d="M3,15L7.428571428571428,15L11.857142857142856,15L16.285714285714285,15L20.71428571428571,15L25.142857142857142,15L29.571428571428573,15L34,15L38.42857142857142,15L42.85714285714286,15L47.285714285714285,19L51.714285714285715,19L56.142857142857146,19L60.57142857142858,19L65,19L69.42857142857143,19L73.85714285714285,19L78.28571428571429,19L82.71428571428572,19L87.14285714285715,19L91.57142857142857,19L96,19L100.42857142857143,19L104.85714285714286,19L109.28571428571429,19L113.71428571428572,19L118.14285714285715,19L122.57142857142857,3"></path><circle class="endpoint" cx="122.57142857142857" cy="3" r="3"></circle></svg></div> </div> </div> </div> </div> </div> </div> </div> <div class="home-content" data-earliest="1666470888792"> <div class="home-page" data-start="1680307200000" data-end="1681862399999"> <div class="row"> <h4 class="home-dateline"> Apr 2023 <small class="home-dateline-separator">•</small> <small> 18 days so far... </small> </h4> </div> <div class="home-columns"> <div class="home-column-primary"> <h5 class="home-group-header organic">Tweet Highlights</h5> <div class="has-data-column home-group"> <div class="home-group-column"> <div class="home-panel-wrap" data-endpoint="top_tweets" data-type="top_tweet"><div class="home-panel typed organic"> <div class="home-panel-content"> <h2 class="home-panel-title">Top Tweet <small> earned 57 impressions </small> </h2> </div> <div class="home-panel-content"> <div class="tweet-container"> <div class="tweet-details"> <span dir="ltr" class="tweet-text"><a href="https://twitter.com/CERT_Polska_en" target="_blank" class="twitter-atreply pretty-link js-nav" dir="ltr" data-mentioned-user-id="103005548">@<b class="p-nickname">CERT_Polska_en</b></a> <a href="https://t.co/ByQSpUYQwh" target="_blank" rel="nofollow noopener" dir="ltr" data-expanded-url="https://www.hybrid-analysis.com/sample/b0233cc9cbf35d7816fca35cccd0ac8502edff8d105e745538620a44ee8d4445" class="twitter-timeline-link" title="https://www.hybrid-analysis.com/sample/b0233cc9cbf35d7816fca35cccd0ac8502edff8d105e745538620a44ee8d4445"><span class="tco-display">hybrid-analysis.com/sample/b0233cc</span><span class="tco-ellipsis"><span class="hidden">&nbsp;</span>…</span></a></span> </div> </div> <div class="tweet-metrics-container"> <span class="tweet-metric"><span class="Icon Icon--retweet"></span> 1</span> </div> </div> <div class="home-panel-footer"> <a class="home-panel-link pull-right" href="/user/KulinskiArkadi/tweets">View all Tweet activity</a> <button type="button" class="btn open-tweet-sheet" data-tweet-id="1647072121414139904">View Tweet activity</button> </div> </div> </div> <div class="home-panel-wrap" data-endpoint="top_follower" data-type="top_follower"><div class="home-panel organic"> <div class="home-panel-content"> <h2 class="home-panel-title">Top Follower <small> followed by 504 people </small> </h2> </div> <div class="home-panel-content wide"> <div class="profile-card"> <a class="profile-card-bg" href="https://twitter.com/alanala76010655" target="_blank" style=" background-color: #1DA1F2; background-image: url(https://pbs.twimg.com/profile_banners/947390817223634944/1678588629/600x200);"> </a> <div class="profile-card-content"> <a class="profile-card-avatar-link" href="https://twitter.com/alanala76010655" target="_blank" title="A"> <img class="profile-card-avatar-image" src="https://pbs.twimg.com/profile_images/1634670072471101445/MsSuldrZ_bigger.jpg" alt=""> </a> <div class="profile-card-user-fields"> <div class="profile-card-name"> <div class=""> <a class="profile-card-name-link" href="https://twitter.com/alanala76010655" target="_blank" dir="ltr">A</a> </div> </div> <div class="profile-card-screenname"> <a href="https://twitter.com/alanala76010655" target="_blank" class="profile-card-screenname-link" dir="ltr">@<span>alanala76010655</span></a> <span class="profile-card-follows-status">follows you</span> </div> <p class="profile-card-bio" dir="ltr">Passion for Life Cryptocurrency Analyst </p> </div> </div> </div> </div> <div class="home-panel-footer"> <a class="view-profile-link" href="https://twitter.com/alanala76010655/" target="_blank">View profile</a> </div> </div> </div> <div class="home-panel-wrap loading" data-endpoint="top_tweets" data-type="top_card_tweet"></div> </div> <div class="home-group-column"> <div class="home-panel-wrap" data-endpoint="top_tweets" data-type="top_media_tweet"><div class="home-panel typed organic"> <div class="home-panel-content"> <h2 class="home-panel-title">Top media Tweet <small> earned 56 impressions </small> </h2> </div> <div class="home-panel-content"> <div class="tweet-container"> <div class="tweet-details"> <span dir="ltr" class="tweet-text"><a href="https://twitter.com/keydet89" target="_blank" class="twitter-atreply pretty-link js-nav" dir="ltr" data-mentioned-user-id="880535878724009985">@<b class="p-nickname">keydet89</b></a> <a href="https://t.co/ZWG0oCiyna" target="_blank" rel="nofollow noopener" dir="ltr" data-expanded-url="http://Virustotal.com" class="twitter-timeline-link" title="http://Virustotal.com"><span class="tco-display">Virustotal.com</span><span class="tco-ellipsis"><span class="hidden">&nbsp;</span></span></a> ? <a href="https://t.co/CwT811OCls" target="_blank" rel="nofollow noopener" dir="ltr" data-expanded-url="https://www.hybrid-analysis.com/sample/bfc165a28a2d66a4e48bb645417fa6517c57fd1ff425b64b8593c40c689fca40/5b37b69c7ca3e1547d24dc18" class="twitter-timeline-link" title="https://www.hybrid-analysis.com/sample/bfc165a28a2d66a4e48bb645417fa6517c57fd1ff425b64b8593c40c689fca40/5b37b69c7ca3e1547d24dc18"><span class="tco-display">hybrid-analysis.com/sample/bfc165a</span><span class="tco-ellipsis"><span class="hidden">&nbsp;</span>…</span></a> <a href="https://t.co/JxCpRAXckT" target="_blank" class="twitter-timeline-link" data-pre-embedded="true" dir="ltr">pic.twitter.com/JxCpRAXckT</a></span> </div> </div> <a href="https://twitter.com/KulinskiArkadi/status/1647152113057951748" target="_blank"> <div class="tweet-media-container js-media-container modal-tweet"> <div class="cards-base cards-multimedia"> <div class="multi-photos photos-3"> <div class="multi-photo photo-1 media-thumbnail twitter-timeline-link" data-url="https://pbs.twimg.com/media/FtvcG1uXsAA8baW.jpg:large" data-resolved-url-large="https://pbs.twimg.com/media/FtvcG1uXsAA8baW.jpg:large"> <img src="https://pbs.twimg.com/media/FtvcG1uXsAA8baW.jpg:large" style="top: -46.40884%; width: 100%; height: auto;"> </div> <div class="multi-photo photo-2 media-thumbnail twitter-timeline-link" data-url="https://pbs.twimg.com/media/FtvcG2_XwAEhEVh.jpg:large" data-resolved-url-large="https://pbs.twimg.com/media/FtvcG2_XwAEhEVh.jpg:large"> <img src="https://pbs.twimg.com/media/FtvcG2_XwAEhEVh.jpg:large" style="top: -150.5747%; width: 100%; height: auto;"> </div> <div class="multi-photo photo-3 media-thumbnail twitter-timeline-link" data-url="https://pbs.twimg.com/media/FtvcG9CWcAAOE-i.jpg:large" data-resolved-url-large="https://pbs.twimg.com/media/FtvcG9CWcAAOE-i.jpg:large"> <img src="https://pbs.twimg.com/media/FtvcG9CWcAAOE-i.jpg:large" style="top: -150.5747%; width: 100%; height: auto;"> </div> </div> </div> </div> </a> <div class="tweet-metrics-container"> <span class="tweet-metric"><span class="Icon Icon--retweet"></span> 1</span> </div> </div> <div class="home-panel-footer"> <a class="home-panel-link pull-right" href="/user/KulinskiArkadi/tweets">View all Tweet activity</a> <button type="button" class="btn open-tweet-sheet" data-tweet-id="1647152113057951748">View Tweet activity</button> </div> </div> </div> </div> </div> <div class="no-data-column invisible"> </div> </div> <div class="home-column-secondary"> <div class="home-group-row" data-endpoint="panels" data-type="advertiser"><h5 class="home-group-header ads">Advertise on Twitter</h5> <div class="home-panel ads"> <div class="home-panel-body"> <div class="home-panel-content"> <img class="home-panel-graphic" width="61" height="61" src="https://ton.twimg.com/insights/img/ads_badge_2x.cf5b185c0dbff6e489211f16b723bec9.png"> <h2 class="home-panel-title">Get your Tweets in front of more people</h2> <p class="home-panel-info-insight"> Promoted Tweets and content open up your reach on Twitter to more people. </p> </div> <div class="home-panel-footer"> <a target="_blank" class="btn btn-primary" href="https://ads.twitter.com/login?ref=gl-an-br-anly&amp;redirect_to_payments=true">Get started</a> </div> </div> </div> </div> <div class="home-group-row"> <h5 class="home-group-header">Apr 2023 Summary</h5> <div data-endpoint="page_summary" data-type="page_summary" class=""><div class="home-pagesummary"> <div class="home-summary-metric col-md-6"> <div class="DataPoint DataPoint--withBottomBorder"> <h3 class="DataPoint-label">Tweets</h3> <div class="DataPoint-info metric-tweets">85</div> </div> </div> <div class="home-summary-metric col-md-6"> <div class="DataPoint DataPoint--withBottomBorder"> <h3 class="DataPoint-label">Tweet impressions</h3> <div class="DataPoint-info metric-tweetviews">891</div> </div> </div> <div class="home-summary-metric col-md-6"> <div class="DataPoint DataPoint--withBottomBorder"> <h3 class="DataPoint-label">Profile visits</h3> <div class="DataPoint-info metric-profile-views">265</div> </div> </div> <div class="home-summary-metric col-md-6"> <div class="DataPoint DataPoint--withBottomBorder"> <h3 class="DataPoint-label">New followers</h3> <div class="DataPoint-info metric-followers">0</div> </div> </div> </div> </div> </div> </div> </div> </div></div> </div>"
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1992
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1992 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1932

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    55ad3bae36ba1f912eee1cf379f421b0

    SHA1

    b06d360958cdb67bea75aaedc9bcca04f562a86e

    SHA256

    e464c2ae92515d64ca0e5fca763162442a705cf6ccaa7da1a5faec4f71e4b366

    SHA512

    7c94936af5323f903c3748b1e49bf49832632e6aec8b37172f1240455eb58b58b60fee68894659305833b90d2a275fc14dcaf3f37794e0b96c5164e7ac5a09de

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    0db61e27c0bed20eebf7ec788f38e8f1

    SHA1

    35013dbfd3badfa4a8105b9d59cebffce20b7ec3

    SHA256

    db59971b85997e386561bbca7416dd68464e1a5ddb595582fe3d5500bf5a2785

    SHA512

    4dc9e9e3dfe8581a183e4b473886be5f73359d8ce46a283b4449332dadeaf0ac44ea9cf40df66402b508415d09d62a03426236bc9a48b9a19222ce6c1db495ec

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    4588fb3ad6d732f7899c60b00e74a2fa

    SHA1

    97c391bdfd00d94d0b87b494efb9663a65c98c8c

    SHA256

    f4a30071477fd94e8407d7428976427db7791403d3f57bfb0b7ed6a9ec098d5b

    SHA512

    409a2c273c4102e5a8544d1c49dbf9f5a78376885de099cee116252a9224d8c198baee5db81a31a6f7c73ec0331a4b9e907ca7232b32f02019bdc00fbc8816c6

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    b275bbd4153e2f22f356408604ffceb5

    SHA1

    a37950bb70418ecd83ec2e539fbbb26edac11799

    SHA256

    bd3d1c29d8db0b7a437dcf8936a713102ce6225627314a45f46a3310d614c37f

    SHA512

    5527dfe72457486c10eacef76f3c59e58b4453f10642be44868be7b809ad8d23018de21461759e634c3977797418a68b8eb0bfa6b4afa27deae72aaaa4961bb2

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    bfa47cac269160e675937c20c71c5325

    SHA1

    60be6dce5ceefd5a82cef60e3aafdc295c79524f

    SHA256

    cacefda05cb6fc2a301b05d43ae791ad932b43988b14062709b0c28d88fc2e91

    SHA512

    f16b02c8af6ce2f5ff858bba2db070996befc47f6baea699c6ab0bba2a76de26701d7ca0b6b09234e148d333a84094d95f5e5b9c7eaf749230f53f7b4cd0a00a

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    3ef41b033f21116a14cff3d88df20a39

    SHA1

    a06af280be1d42a095ca970582bddd496eb37814

    SHA256

    952c35a02442bb032aeb59dc34169dcdb9b5eeb491c85852b141e8ce59e6a657

    SHA512

    2a7fc55fa5b5263ce6c654c6817e2ca1be1eacb7df21839ac214cc47d061bf0d87f1ceae9151d6fbb2f2c82b1eafd05c021e22a04ac9ea9227de9056f866d122

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    43a39008a6b5252806d8ece45987dc47

    SHA1

    2e3c61858cad9d0d1d28e329d8681c0064608661

    SHA256

    4a73d296fe371178186f06b00a05101faa2335b9864d5aea3ea26c7dba4f1eb1

    SHA512

    f67b9da88e3b6e003f121da642d9143df2881ed15194ab2c7aa7ef0b8048f4a1297ae7b7337bcb12ffebb63d25ec37008460d0a442e3d7e66e483e0b3bfc338f

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    f5d040a19fda88072d4e7b599b8bcdfb

    SHA1

    11179b9131da8237a855ea1f91a00f6d733f1c5a

    SHA256

    96593fe537bccf9a648d4106488a28051f0127a11e4f8a962be35683487dfea4

    SHA512

    089828f531e1893d830a6f4fa1a459a26c6d25c4f8fbc475d9e2f2a06d0904137ba7d2871623b0fc79b98c6a87844d3c1ed3cf05039ce3ccc9699ca8c7004fc7

    Download Submit

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ACT9UUKV\suggestions[1].en-US
    Filesize

    17KB

    MD5

    5a34cb996293fde2cb7a4ac89587393a

    SHA1

    3c96c993500690d1a77873cd62bc639b3a10653f

    SHA256

    c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

    SHA512

    e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\Cab560F.tmp
    Filesize

    61KB

    MD5

    fc4666cbca561e864e7fdf883a9e6661

    SHA1

    2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5

    SHA256

    10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b

    SHA512

    c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\Cab56DD.tmp
    Filesize

    61KB

    MD5

    e71c8443ae0bc2e282c73faead0a6dd3

    SHA1

    0c110c1b01e68edfacaeae64781a37b1995fa94b

    SHA256

    95b0a5acc5bf70d3abdfd091d0c9f9063aa4fde65bd34dbf16786082e1992e72

    SHA512

    b38458c7fa2825afb72794f374827403d5946b1132e136a0ce075dfd351277cf7d957c88dc8a1e4adc3bcae1fa8010dae3831e268e910d517691de24326391a6

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\Tar573F.tmp
    Filesize

    161KB

    MD5

    be2bec6e8c5653136d3e72fe53c98aa3

    SHA1

    a8182d6db17c14671c3d5766c72e58d87c0810de

    SHA256

    1919aab2a820642490169bdc4e88bd1189e22f83e7498bf8ebdfb62ec7d843fd

    SHA512

    0d1424ccdf0d53faf3f4e13d534e12f22388648aa4c23edbc503801e3c96b7f73c7999b760b5bef4b5e9dd923dffe21a21889b1ce836dd428420bf0f4f5327ff

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\HF2LI8M1.txt
    Filesize

    599B

    MD5

    3e97589d14da046dbfe9be0d9eea8708

    SHA1

    9268e240d43e5545618db9ae45ee79b217cda245

    SHA256

    7c8ca9fe62b422e767df92b51785330f4c135fd57154ec20b507973ada9fb9d6

    SHA512

    9b52227e8e22b1ec408134048efa331afca273937f3a727fe56c5d5136d144fd3d7f5b6e831a413997dec63c073d61bc4edabd13e1491a88453b23ca8eea2b38

    Download Submit