General
- Target 52f37f9c800ae0bef724c76c69d44b5b.exe
- Size 778KB
- Sample200902-9kn8rpwlze
- SHA256 46c1beb680fee0894d6a58d53ee86faeb9dfa24db88f178580dfbd1385e4c581
- MD5 52f37f9c800ae0bef724c76c69d44b5b
- SHA1 42919745f4418c0f008e590f6b90880243caa438
- SHA512 4edce57ce4ebe1a29f61d378c32627807f84e53796737f3abe273b500510eb8c69c7842b699bff9c3713da4d4656c1b1a0b8f9b1109c42de9884208066c3d311
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
52f37f9c800ae0bef724c76c69d44b5b.exe
Resource
win7v200722
Malware Config
Extracted
-
formbook
-
http://www.masion2.info/u6ga/
-
bsignatureenterprises.com
-
hindu.love
-
freegeneratorforall.com
-
greenpeasandlove.com
-
issvnews.com
-
conversationsforyoursoul.com
-
33efe.com
-
hypnosisatlanta.info
-
publicsectorpress.com
-
naturestruessence.net
-
xn--90ais8bzae.xn--p1acf
-
pemenangshopee.com
-
assassinspaintball.com
-
canna.homes
-
howtocodeinjs.com
-
davewescon.com
-
qualitheory.com
-
milashpro.com
-
yayazshops.com
-
bomei138.com
-
tattobies.com
-
raifusutairu.com
-
oohdough.com
-
letstakeitourselves.com
-
nostylish.com
-
ladivinacomedia.net
-
housestyledhomestaging.com
-
llpizzapasta.com
-
reallifenova.net
-
caluxuries.com
-
setuppe.com
-
pemfofbakersfield.com
-
trendsuppliers.com
-
cloodbase.com
-
sevenemlak.xyz
-
bluebayvrwdshop.com
-
bankparking.net
-
kuttykids.com
-
schoolerm.com
-
sawc.info
-
funerarias.site
-
productosbamoa.com
-
pchelka.store
-
wheelchairsportsworldwide.com
-
yidaiw117988765.com
-
nithorpandulipi.com
-
coko816.com
-
bartramtradingpost.com
-
chinnangroup.com
-
onlinecarmart.com
-
alarmanlagentest.com
-
pizzaveneciana.com
-
brian-newby.com
-
nhansu1click.com
-
reckphoto.com
-
worldisonfire.net
-
makeamovie.info
-
thibau4.xyz
-
sheeshpapa.com
-
theirpseudonym.life
-
happycampersvc.com
-
magmeticseparetors.com
-
thefantasticsmilesofhouston.com
-
ytbfyj.com
Targets
-
- Target 52f37f9c800ae0bef724c76c69d44b5b.exe
- Size 778KB
- SHA256 46c1beb680fee0894d6a58d53ee86faeb9dfa24db88f178580dfbd1385e4c581
- MD5 52f37f9c800ae0bef724c76c69d44b5b
- SHA1 42919745f4418c0f008e590f6b90880243caa438
- SHA512 4edce57ce4ebe1a29f61d378c32627807f84e53796737f3abe273b500510eb8c69c7842b699bff9c3713da4d4656c1b1a0b8f9b1109c42de9884208066c3d311
- MD5 SHA1 SHA512
-
Formbook Payload
-
Suspicious use of SetThreadContext