General
- Target Consignment Details.exe
- Size 194KB
- Sample201210-rxwxvqcgn6
- SHA256 6526a7eed94f5bff8a1c8b3d9d0aca202b72102edb7beec08644ff9ba06e00e2
- MD5 b0fc8a096f32d026dd685bbf1a6abf50
- SHA1 28ea752d2f13934fde381a85647dfc368f909372
- SHA512 dd8585dc113ff8ec153a8f0e4e5392c02e8bcd67c90a5f0eab78f1706256b1ae3329268faf5b5b4f6127fc48cbd8372f81eb2f8b4c4f91ce2b8dbe9d073e380e
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
Consignment Details.exe
Resource
win7v20201028
Malware Config
Extracted
-
formbook
-
http://www.otmpics.com/bhg0/
-
dakrand.site
-
realtymarketingtips.com
-
bylersconcrete.com
-
cp-fitvn.asia
-
csraheroproject.com
-
4053w154st.com
-
respiratorconsulting.mobi
-
yourheart.club
-
collupyglass.com
-
clichechemical.com
-
yijinglighting.com
-
jeffreymichaeltaylor.com
-
searchingthearea.com
-
essenceforlife.info
-
polariskidz.com
-
glonsdale.com
-
stormharborsupply.com
-
go-likeapp.com
-
flavorbeats.com
-
imtheonlyperson.community
-
gracefullycoiled.com
-
moneyfreedom.world
-
beykswde.icu
-
ilgustocarlton.com
-
9wdhis2pxiy.net
-
kotexsettoement.com
-
clarityofcode.com
-
magenx2.info
-
dhrutii.com
-
test-erik.one
-
yieldtopshop.com
-
zsmassage.club
-
thefriendsofmaryc.com
-
asaayl.com
-
bellfino.com
-
salcedosgeneralbuilder.com
-
learningtriangle.xyz
-
thegoodgirlfriendstore.com
-
jorgecanoimpro.com
-
novattion.com
-
oledtw.com
-
coasttocoastimportsreviews.com
-
xn--82ca0bsd7c3d1alb80ac.com
-
allstarfze.com
-
intentrepreneur.com
-
thrustpointatl.com
-
sochi-xxx.info
-
davidlevitanrealtor.com
-
shardaesolution.com
-
tutorial07970.com
-
reversemortgageloanmiami.com
-
sanskarfashion.com
-
sannoecuador.com
-
end-cycle.com
-
misa-etospecial.com
-
efetekniktakim.com
-
patrickwilsontraining.com
-
zombiedefender.com
-
onhisbehalf.net
-
klccg.com
-
ecocarpdfmanual.com
-
rifeng18.com
-
zigywig.com
-
cheovietnam.com
Targets
-
- Target Consignment Details.exe
- Size 194KB
- SHA256 6526a7eed94f5bff8a1c8b3d9d0aca202b72102edb7beec08644ff9ba06e00e2
- MD5 b0fc8a096f32d026dd685bbf1a6abf50
- SHA1 28ea752d2f13934fde381a85647dfc368f909372
- SHA512 dd8585dc113ff8ec153a8f0e4e5392c02e8bcd67c90a5f0eab78f1706256b1ae3329268faf5b5b4f6127fc48cbd8372f81eb2f8b4c4f91ce2b8dbe9d073e380e
- MD5 SHA1 SHA512
-
Xloader Payload
-
Deletes itself
-
Suspicious use of SetThreadContext