General
-
Target
New Orders 122020 2 x 40 HQ.pdf.exe
-
Size
642KB
-
Sample
210510-21wj7nhgan
-
MD5
a02437aa430c0ca2847115f6ca17d0a3
-
SHA1
1fa9f7f2bae891e8e06e73bd01abf18e839829a6
-
SHA256
8df52ba27a44fa2964a2fe9de4894aefa47b3c09abaeeb9602bde6d96926136e
-
SHA512
7983864d374d31b9b5a286afbed5024f61e8636b5ca374c421ceb888699919b10ee05951713b49b56e1df4eb64eb8ea931550a9ecf6993542eef1e159eed40a3
Static task
static1
Behavioral task
behavioral1
Sample
New Orders 122020 2 x 40 HQ.pdf.exe
Resource
win7v20210410
Malware Config
Extracted
formbook
4.1
http://www.supinapp.com/grv/
morganofatlanta.com
vz473.com
hengetelt.com
bailcally.com
virtuosoonline.com
tenthousandli.com
ohanamascota.com
digi-plates.com
prismagtech.com
we-cinema.com
372680.com
smartautoexpert.xyz
mrxzg.com
apartment-brussels.com
reverseincubator.com
linkasean.com
yummicrabva.com
diguchaye.com
reaktorfatura.com
thecatsaysno.com
mpgcommunications.net
lindustrieetleca.com
seosansar.com
alohalily.com
novergi.com
universityincanada.info
atrocity.xyz
johnsonballoonblessings.com
laurelmcintosh.com
nubedepalabras.com
ycmath.com
daveysdestinations.com
yourgutterguru.com
mayas.website
bessgarments.com
xhegu.com
mybusinessdoor.com
vivaceactivewear.com
nongyan.net
tgi-mail.net
j999a.com
slteka.com
pikipikiit.com
as0594.com
insuremydriverslicense.com
kclundsblades.com
haircleanerpro.com
charlesnwahiwe.com
ervoth.com
authentiekinnovations.com
molvmg.icu
xn--k1abtc6be.xn--p1acf
arm-srl.com
hood2healer.com
austinchapter7.com
clarityentct.com
bryllaw.com
twinworksllc.com
top-trend.website
rueschlink.com
oogilab.com
thewritersbookshelf.com
jademarkproducts.com
400city.com
Targets
-
-
Target
New Orders 122020 2 x 40 HQ.pdf.exe
-
Size
642KB
-
MD5
a02437aa430c0ca2847115f6ca17d0a3
-
SHA1
1fa9f7f2bae891e8e06e73bd01abf18e839829a6
-
SHA256
8df52ba27a44fa2964a2fe9de4894aefa47b3c09abaeeb9602bde6d96926136e
-
SHA512
7983864d374d31b9b5a286afbed5024f61e8636b5ca374c421ceb888699919b10ee05951713b49b56e1df4eb64eb8ea931550a9ecf6993542eef1e159eed40a3
-
Formbook Payload
-
Deletes itself
-
Suspicious use of SetThreadContext
-