General
-
Target
FACTURA.exe
-
Size
611KB
-
Sample
210430-3e32s7vafa
-
MD5
41139206c15e8c61c27ca43e3192bc8e
-
SHA1
02c15c14a3a0b5820ab4ed2bfd69ac91e657dd54
-
SHA256
7e9e2f374b11dfa16e25e0d4097f977a521534e43007de1abc91a2231445f827
-
SHA512
ae46e0e1127aeaf9ce9f9d8cd2e20215b443d5b27f19ec250c084bb5f27d2b5dae943cbe0b5deacb71f765ff64c08de4a07b7066a14cc4e40f89dc8c9bafa40e
Static task
static1
Behavioral task
behavioral1
Sample
FACTURA.exe
Resource
win7v20210410
Malware Config
Extracted
formbook
4.1
http://www.middlehambooks.com/klf/
podcastyourvote.com
northernlsx.com
guide4idiots.com
artebythesea.com
sapanyc.com
livinoutthedreamsco.com
thepowersinyou.com
protocolmodern.com
holdergear.com
betteringthehumanexperience.xyz
agnostec.com
royermaldonado.com
wealthtruckingco.com
artcode-software.com
microsoftpods.com
identityofplace.com
algoritas.com
grandpaurbanfarm.net
zahidibr.com
flawlessdrinking.com
amymako.com
tinymodeldiana.com
restoremyorigin.com
gyrostoyou.com
boiler-portal.com
aprilmarieclaire.com
midollan.com
finestfaux.com
lownak.com
okque.com
woodandresin.club
benficalovers.com
fangyu5827.com
tententacleshydro.com
oouuweee.com
sgsnit.com
fairisnotfair.com
shpwmy.com
238olive.com
4515a.com
frontrangetechnologies.com
v-travelclub.com
supportserverhotline23.info
snowandmotion.com
colinboycemp.net
yowoit.com
neopivot.com
singlebarrel.net
esdras-almeida.com
contecoliving.com
doctorsdietgulfport.com
issue72-paypal.com
pubgfrut.com
constipationhub.com
themodernspiritualgoddess.com
qzhongkong.com
bizcert360.com
nashvillegems.com
barryteeling.com
wzocflfor.com
mirrorsmarbella.com
nyariorganics.com
packtmall.com
100973671.review
Targets
-
-
Target
FACTURA.exe
-
Size
611KB
-
MD5
41139206c15e8c61c27ca43e3192bc8e
-
SHA1
02c15c14a3a0b5820ab4ed2bfd69ac91e657dd54
-
SHA256
7e9e2f374b11dfa16e25e0d4097f977a521534e43007de1abc91a2231445f827
-
SHA512
ae46e0e1127aeaf9ce9f9d8cd2e20215b443d5b27f19ec250c084bb5f27d2b5dae943cbe0b5deacb71f765ff64c08de4a07b7066a14cc4e40f89dc8c9bafa40e
-
Formbook Payload
-
Deletes itself
-
Suspicious use of SetThreadContext
-