anthon.exe

General
Target

anthon.exe

Size

337KB

Sample

201126-hegkcn6k5n

Score
10 /10
MD5

ea85c89530ed6f12fd8b75451f37afd5

SHA1

9ad88734ca8e7c7e0f09b89f244ca7f4a1f606a6

SHA256

29f75d4db1b85197038c1ed08661ef0a72158ac895e6aac76526bab07d83c318

SHA512

f89c1b3123f77616ee692cb0da7c35b1c095b2917015fa5e38140e1f6755e1937acab3e1269ce414e0c677446df5aa2dd923bf5e238d390c936dffac6311952b

Malware Config

Extracted

Family formbook
C2

http://www.wellnesspharma.net/94sb/

Decoy

kaligao.com

springsbounce.com

dreamytree.com

trylolows.com

butload.info

creperie-pancakesquare.com

mirajions.com

joineduphealthresources.net

hamradioblogs.com

linghuidz.com

atelierzeste.com

tweens.network

perteprampram03.net

connorneill.com

nannatech.com

chrmo.com

nanoring.info

mapomarket.com

bongkey.com

sdhhzp.com

threepeninsulas.com

izicomp.net

gekkey.com

pyskah.com

tritoncareer.com

aspirehowhouse.com

don8gr8.com

selfie-trends.com

jogja1945.info

tibio.store

kiranmayee.codes

stlmache.com

aaagroups.net

lzli.net

ranchomanantiales.com

augsburgconfession.net

eczamix.com

subcontratech.com

jwm-consulting.com

alepremiumcartel.com

thesacralgenie.com

dronebezorgd.com

shoprosalind.com

theafterglowagency.com

motoprimoreviews.com

walmartpetrex.com

awonderliang.com

peipei521.com

qabwg.com

trucleanusa.com

Targets
Target

anthon.exe

MD5

ea85c89530ed6f12fd8b75451f37afd5

Filesize

337KB

Score
10 /10
SHA1

9ad88734ca8e7c7e0f09b89f244ca7f4a1f606a6

SHA256

29f75d4db1b85197038c1ed08661ef0a72158ac895e6aac76526bab07d83c318

SHA512

f89c1b3123f77616ee692cb0da7c35b1c095b2917015fa5e38140e1f6755e1937acab3e1269ce414e0c677446df5aa2dd923bf5e238d390c936dffac6311952b

Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          1/10