General
- Target Bank Swift TT copy.exe
- Size 882KB
- Sample201023-e4ln8bjzh6
- SHA256 51fc4c13e2fa607113d821aaab2ba2e96d10097d69698ec3facc71b8b751e068
- MD5 750573c0d279954b21170cd2e060002e
- SHA1 b2b914956935da87e68847688476e4dbcdd9f3ce
- SHA512 90e5ae4fda9520bbd145cd9a712c04a0b0d376825ab6a3bd8873b088dd4ce05aad4bfa3d19aa38a2300631d72c7b9a44766a063302be3635ae08288271aa0ce3
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
Bank Swift TT copy.exe
Resource
win7v200722
Malware Config
Extracted
-
formbook
-
http://www.onedollarreports.com/ga4/
-
rivercitygoldens.com
-
seattlebarkery.com
-
jxsxdb.com
-
bet365o1.com
-
mynexthomedfw.com
-
scheduleyourintentions.com
-
vestingfacts.com
-
angelicasanchezpsicologa.com
-
constructorariedel.com
-
myabron.com
-
askthepotato.com
-
cuscases.com
-
dlrioata.com
-
ilikecircles.com
-
teamsters401kupsplan.com
-
79dzb.com
-
simoneventpros.com
-
cloversonglyrics.com
-
intansuper.com
-
gamefacesydney.com
-
rangemarketsltd.com
-
hobbyoo.com
-
miniperle.com
-
p17173.com
-
leveecrossfit.com
-
despoticat.com
-
mingchi168.com
-
zumoapp.xyz
-
outdoorsmanparadise.com
-
loveahoodie.net
-
vigorlifeproject.com
-
zoomforyourhealth.com
-
xcusebeseheje.com
-
avorothforever.com
-
cornak.xyz
-
99f91.com
-
twofishsoft.com
-
xn--qpr83at9ccyf9y6dksya.site
-
fisheye.fish
-
sanskaar.life
-
afghanmoneyexchange.com
-
capitalvideos.com
-
nunezh.com
-
ghhjddtu.com
-
emythaccelerators.com
-
hellocarrey.com
-
notify-nab.com
-
ninjamelody.com
-
qihuo119.com
-
anandsharmah.com
-
javedcoaching.com
-
st883.com
-
pawhot.com
-
xisburgueria.com
-
indiana4biden.com
-
foodrenewal.com
-
weibringcreative.com
-
theloveofliving.com
-
grandbilisim.com
-
pleasurezoneplaybook.com
-
merhomeimprovement.com
-
mydepressed.com
-
bolplasticelaguilagt.com
-
nikoladom.com
Targets
-
- Target Bank Swift TT copy.exe
- Size 882KB
- SHA256 51fc4c13e2fa607113d821aaab2ba2e96d10097d69698ec3facc71b8b751e068
- MD5 750573c0d279954b21170cd2e060002e
- SHA1 b2b914956935da87e68847688476e4dbcdd9f3ce
- SHA512 90e5ae4fda9520bbd145cd9a712c04a0b0d376825ab6a3bd8873b088dd4ce05aad4bfa3d19aa38a2300631d72c7b9a44766a063302be3635ae08288271aa0ce3
- MD5 SHA1 SHA512
-
Formbook Payload
-
Suspicious use of SetThreadContext