PO# 4415902670.exe

General
Target

PO# 4415902670.exe

Size

542KB

Sample

201126-sqdvv654ge

Score
10 /10
MD5

058e6f06a51e22bbc975eecf35c34844

SHA1

638f4727a99bb389e8e6a77c4fbee17bdc19fc60

SHA256

ad644da69f848609475d2a3d773eadf646d4c1e1cb20e4b87422d224e2ccbe32

SHA512

0b04ed15c05b5c5791c8cc5478219e82e9f5def8d9d4f445ef03f3b39a8a76b7e28e7312914624c35b578a74927230e5e0f52c2039cd45db0047da255e15669e

Malware Config

Extracted

Family formbook
C2

http://www.klingenwacht.com/mlg/

Decoy

xintianpx.com

chrispsheehan.com

sensationallyot.com

veloceda.com

fanoosbattery.com

wenda7.com

cultivatecultura.com

mersinci.com

makeupbrushhes.com

vptexpediters.com

hispoemin.com

mikeshouseofathousandlegs.com

dealclosersplayback.com

knightdalesleeps.com

1uprealestate.com

showeraccessory.com

perthpanelbeaters.com

novergi.com

directmultiservice.com

mi-miftahurrohmah.com

thiswordpress.com

5gtelephonics.com

laprude.com

iyojuzn.com

delibroysusoficios.com

waterloowools.com

cleva21travels.com

origogin.com

packalunchandbreakfasttoo.com

zeusorg.com

icyblossom.com

mhs1.online

heatherseeds.com

dulichdanang365.com

thtattoo.com

rethinkingusers.com

pornumb.com

accountrestorer.com

alohabeautybaracademy.net

shoesiin.com

foxlawgroupus.com

tiempodepartida.com

todoparazurdos.store

virtual-tokyotower.com

masteringrwe.com

katrinehorn-coaching.com

enviroid.com

bienliveryleasing.com

nwflworkcomp.com

pineridgepark-mhp.com

Targets
Target

PO# 4415902670.exe

MD5

058e6f06a51e22bbc975eecf35c34844

Filesize

542KB

Score
10 /10
SHA1

638f4727a99bb389e8e6a77c4fbee17bdc19fc60

SHA256

ad644da69f848609475d2a3d773eadf646d4c1e1cb20e4b87422d224e2ccbe32

SHA512

0b04ed15c05b5c5791c8cc5478219e82e9f5def8d9d4f445ef03f3b39a8a76b7e28e7312914624c35b578a74927230e5e0f52c2039cd45db0047da255e15669e

Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1