General
-
Target
Requirement of Sonic Tube 50 mm.exe
-
Size
299KB
-
Sample
210226-bzg2l3m456
-
MD5
5e51248701b8a456d39854abfe287c86
-
SHA1
e4c46f8e5d7eceeaab88591c75fb55c8c52b963c
-
SHA256
c1a40dbca9d28ac760447f501d812b82312be281ee699fdcc4a6a543077caa3d
-
SHA512
f122ce0ee0daa496fc5714f8e7f0cdffa590877e16a3aba4980afbf9007942264b0ca71de16af81a188e089ffcb39f1ffaf75d0b635ac1b662ff424661f297ee
Static task
static1
Behavioral task
behavioral1
Sample
Requirement of Sonic Tube 50 mm.exe
Resource
win7v20201028
Malware Config
Extracted
formbook
http://www.fun4gang.xyz/thg/
retrospectphotographydesign.com
jafodraws.com
cigiwie.space
upgradecarehealth.com
12ts.xyz
111indianbend.com
qqchbakery.com
0831xx.com
supecret.com
ayfadopple.com
coldwateradvisors.com
forexgiftcard.com
actionconsultingchile.com
mpsconcrete.net
carmallc.com
b167888.com
simonking.xyz
elitedigitalperformance.com
essentialjanitorialservices.com
barcosocasionberga.com
skyboxorganics.com
luewedrware.com
gypsybrandswag.com
v-surf-boards.com
maxbeautypro.com
bellahappy24.com
translatemyanmar.com
streemsex.com
wql.xyz
2002sport.xyz
septerrallc.com
pk30jpt5n.xyz
propurposepivot.com
vietristore.com
ghyperdigital.com
peau-parfaite.com
hdhldance.com
restaurantweeknepal.com
ww-tree.space
svim.net
flowersforeveraz.net
victormsalazar.com
sinaates.store
photomagazineextra.com
427557.com
regenerativesouls.com
lovestsintao.space
hyweljones.net
rogerbyronlaw.com
retirocard.com
jeterfurniture.com
chekax.com
fryare.info
themarronteam.com
gravitonbeam.com
writinglover.site
theroyaltot.com
blackberry-fr.com
healthpanel.net
diplomx-vo-vladivostoke.com
cftongxing.com
minadoasfalto.com
tokogrosirjaya.com
szmingfang.com
Targets
-
-
Target
Requirement of Sonic Tube 50 mm.exe
-
Size
299KB
-
MD5
5e51248701b8a456d39854abfe287c86
-
SHA1
e4c46f8e5d7eceeaab88591c75fb55c8c52b963c
-
SHA256
c1a40dbca9d28ac760447f501d812b82312be281ee699fdcc4a6a543077caa3d
-
SHA512
f122ce0ee0daa496fc5714f8e7f0cdffa590877e16a3aba4980afbf9007942264b0ca71de16af81a188e089ffcb39f1ffaf75d0b635ac1b662ff424661f297ee
-
Formbook Payload
-
Deletes itself
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-