General
-
Target
Shipment Document BL,INV and packing List.exe
-
Size
774KB
-
Sample
210510-gv6esw3696
-
MD5
8747be9af2688f83bdf089fe38fb722b
-
SHA1
abc42ff0d275b549d5ffe93986c32d663f762c7f
-
SHA256
d56c4c2f5d2fb1888a61723b99845f21742ab93794bc0fdcf146a67c33919e1f
-
SHA512
80e2b8e6365cdb513993a7194fc97b89bdd702a065edf7df6c8aadda623e578f721df2d45d2d9939f400eb05d9c401169152bcda89e2a213e93df1af7a77f2c1
Static task
static1
Behavioral task
behavioral1
Sample
Shipment Document BL,INV and packing List.exe
Resource
win7v20210410
Malware Config
Extracted
formbook
4.1
http://www.semenovdmitriik.club/bwk/
alexrabus.com
education618.com
nelivo.com
gosanispire.com
cdaboozecruise.com
lovenfys.com
wellsleyarts.com
madcord.net
aadiventura.com
prideglobalholdings.com
tu-aviso.com
rjroof.com
upthehilldogwalking.com
ultraletefit.com
opinetree.com
retiredalsolovingit.com
oculensweb.com
laurartproductions.com
uncontenido.com
elisabethchin.com
fefffisce.info
radicallymessy.church
ufdzbhrxk.icu
nerdtoysuk.xyz
alibbv.com
wellness-sense.com
northernirelandcustoms.academy
propointcleaning.com
essentials19.com
ethereumlp.com
campustore.net
dubai-tlv.com
videoadprofits.com
getblackops2hack.com
jawwal.xyz
sacpanel.com
statiajewels.com
moveincyprus.com
skip3-akjsdn.com
psychedelicsnail.com
linkitmexico.com
legalmktexas.net
kickitfashion.com
jphomedecor-01.com
iyogyl.com
wester.zone
freightlogins.com
mytinyhometips.com
shaunmdurrantbooks.com
weretheshepards.com
rigwelllifetimeonline.com
artistssupportpledge.com
hymingfeng.com
konbeca.com
mack-soldenfx.com
xywedding.com
hg62988.com
wirebeevehicles.com
barnettmt5.com
businesspartner360.com
financesdigital.com
thejadedopal.com
fragrancecollector.com
pigpigworld.com
Targets
-
-
Target
Shipment Document BL,INV and packing List.exe
-
Size
774KB
-
MD5
8747be9af2688f83bdf089fe38fb722b
-
SHA1
abc42ff0d275b549d5ffe93986c32d663f762c7f
-
SHA256
d56c4c2f5d2fb1888a61723b99845f21742ab93794bc0fdcf146a67c33919e1f
-
SHA512
80e2b8e6365cdb513993a7194fc97b89bdd702a065edf7df6c8aadda623e578f721df2d45d2d9939f400eb05d9c401169152bcda89e2a213e93df1af7a77f2c1
-
Formbook Payload
-
Deletes itself
-
Suspicious use of SetThreadContext
-