General
- Target a06a7f5eebcc8775298bc39c7a8a8467.exe
- Size 1.0MB
- Sample210325-3acmpsalgs
- SHA256 8abbb82177795958ea53d73a1bbec66ee19065039c7c48d37d3d6b02bd92ff1e
- MD5 a06a7f5eebcc8775298bc39c7a8a8467
- SHA1 0634839636fe256c3113f2a4f153dde82a8a50fb
- SHA512 82fe3bbfb07ef42b85d95ba1d208822dcf1adb6071385201264505f5909dde32a0a95e50140829352eb3f35d006e8fa43666c151a9262ed8afd650642752e519
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
a06a7f5eebcc8775298bc39c7a8a8467.exe
Resource
win7v20201028
Malware Config
Extracted
-
formbook
-
http://www.devintagefanaat.com/gbc/
-
norsk.guru
-
avidreadershop.com
-
serhancoop.com
-
miamimetalmen.com
-
woodenbenchesforsale.com
-
nationalrealstate.com
-
grandesuccesso.net
-
oldsoulsurboards.com
-
thrbakeryroomkw.com
-
alternativetouber.com
-
1645pacific1a.com
-
51hamahama.com
-
scottishhiking.com
-
thefieldtrialer.com
-
majordogear.com
-
6nly.com
-
pharmacistscbd.com
-
arpy.world
-
exyu-hosting.com
-
peterboroughweddings.com
-
directlinemediastreaming.com
-
archelectricsolar.com
-
sol-energies.com
-
dkdtnjfst.icu
-
upstreamsmokedsalmon.com
-
prometheumcap.com
-
sheffieldscienceinpolicy.com
-
healthcareeradvisor.com
-
togetherindeed.today
-
snowbizbham.com
-
gkjpondokgede.com
-
cuervosmante.com
-
techopreneur.com
-
zrcesummer.com
-
teachinthelight.com
-
bioniccubes.com
-
sazeninainternetu.com
-
novelsiren.com
-
yuzhongheng.com
-
olenfex.com
-
theurbanvista.com
-
conniefit.com
-
animearthoodies.com
-
qancao.com
-
apexlegendsmobilehack.club
-
therealnotary.com
-
tenoneco.com
-
512zhuizhai.com
-
eaglebankingservices.com
-
kitislinks.com
-
ignite.foundation
-
livegreenerusa.com
-
pcbkamgarsoc.com
-
cannabiss.clinic
-
pretty-winks.com
-
linjiaxiaohuijihuoma.com
-
meinrepair.com
-
jusryte.com
-
verena-fink.com
-
buhfay.com
-
priceslasher.net
-
glenwoodlions.com
-
ddservo.com
-
meilleurs.pro
Targets
-
- Target a06a7f5eebcc8775298bc39c7a8a8467.exe
- Size 1.0MB
- SHA256 8abbb82177795958ea53d73a1bbec66ee19065039c7c48d37d3d6b02bd92ff1e
- MD5 a06a7f5eebcc8775298bc39c7a8a8467
- SHA1 0634839636fe256c3113f2a4f153dde82a8a50fb
- SHA512 82fe3bbfb07ef42b85d95ba1d208822dcf1adb6071385201264505f5909dde32a0a95e50140829352eb3f35d006e8fa43666c151a9262ed8afd650642752e519
- MD5 SHA1 SHA512
-
Formbook Payload
-
Suspicious use of SetThreadContext