#GotFocus - Twitter Hashtag

ViNNi KiNiKi | Black Light Art & Street Artist 👽 @vinnikiniki

over 5 years ago

3 Top Tips on achieving perfect focus 💯🤘 1. Close Twitter browser tab 2. Forget of the existence of Twitter and #NFTs 3. Actually get sh!t done #GotFocus? #Focus #NFT

1

8

0

JL 💥 || GOT7 💚 IGOT7 🫰 @got7forever2828

over 7 years ago

@7for7Shoppe Uwuu 💕 thank you.. broke ako ngayun kaya makikisali HAHAHA .. baka naman sakaling manalo 😆😂🤣 God Bless and FIGHTING 😍 @wangjacksonsfo1 @xarahmeey_ @itsmeprincess0p #GOT7 #GOT7_FOCUS_ON_ME #GOTFOCUS @GOT7Official

got7forever2828's tweet photo. @7for7Shoppe Uwuu 💕 thank you.. broke ako ngayun kaya makikisali HAHAHA .. baka naman sakaling manalo 😆😂🤣 God Bless and FIGHTING 😍

@wangjacksonsfo1 @xarahmeey_ @itsmeprincess0p

#GOT7 #GOT7_FOCUS_ON_ME #GOTFOCUS @GOT7Official https://t.co/j0uGHMaPz2

0

2

0

Malwrologist

@DissectMalware

over 7 years ago

Tired of seeing AutoOpen AutoClose? What about #GotFocus? Interesting usage of ini file + cmstp to pivot to the next stage (downloading a scriptlet (#JavaScript with embedded #PE)) All cool things from #GrandCrab! @InQuest @ItsReallyNick @cyb3rops @bohops @decalage2 @Malwageddon

InQuest @InQuest

over 7 years ago

Interesting #malicious #doc (low detection #VT 6/58) > VBA is triggered by img #GotFocus event> dump #ini (has UnRegisterOCXs)> cmstp ini_file (to dl #scriptlet)> #obfuscated #JavaScript>#PE (#GandCrab) /companyreviews.serveftp.com/SEAxV5lx_1.txt https://t.co/pGpr8rIlou

InQuest's tweet photo. Interesting #malicious #doc (low detection #VT 6/58) > VBA is triggered by img #GotFocus event> dump #ini (has UnRegisterOCXs)> cmstp ini_file (to dl #scriptlet)> #obfuscated #JavaScript>#PE (#GandCrab)

/companyreviews.serveftp.com/SEAxV5lx_1.txt

https://t.co/pGpr8rIlou https://t.co/xcG2tNCYX9

3

19

9

3

0

2

82

36

3

0

InQuest @InQuest

over 7 years ago

Interesting #malicious #doc (low detection #VT 6/58) > VBA is triggered by img #GotFocus event> dump #ini (has UnRegisterOCXs)> cmstp ini_file (to dl #scriptlet)> #obfuscated #JavaScript>#PE (#GandCrab) /companyreviews.serveftp.com/SEAxV5lx_1.txt https://t.co/pGpr8rIlou