General
- Target new purchase order No 0696846238 9684753285.exe
- Size 876KB
- Sample200804-anxfs63fds
- SHA256 9d9739b817d35a815e89c74d8e04d1571e5591de09ca6e8d7a634b140db45605
- MD5 2149d478dc2ab312f830411d32e49332
- SHA1 f9aad7b7e770f52467151f85ecda69bda14ed25c
- SHA512 640e10c8e926aaa014c2a160f5ec4e91f5ae8093b0f3cd5077db884c48761c0b83068254e64ee36393d9482fc554d631d9ec558804b3a9279deb5015416510e4
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
new purchase order No 0696846238 9684753285.exe
Resource
win7v200722
0 signatures
0 seconds
Malware Config
Targets
-
- Target new purchase order No 0696846238 9684753285.exe
- Size 876KB
- SHA256 9d9739b817d35a815e89c74d8e04d1571e5591de09ca6e8d7a634b140db45605
- MD5 2149d478dc2ab312f830411d32e49332
- SHA1 f9aad7b7e770f52467151f85ecda69bda14ed25c
- SHA512 640e10c8e926aaa014c2a160f5ec4e91f5ae8093b0f3cd5077db884c48761c0b83068254e64ee36393d9482fc554d631d9ec558804b3a9279deb5015416510e4
- MD5 SHA1 SHA512
-
Formbook Payload
-
Adds Run key to start application
-
Suspicious use of SetThreadContext