General
-
Target
PO Pedido de consulta RFQ1120020211001.zip
-
Size
459KB
-
Sample
211001-yvmccadba8
-
MD5
90c9aa2da59bd71b05ee0ca93a76d6f2
-
SHA1
21a9415d5769d09d87b2998be2694e39c23cb92d
-
SHA256
e70dfa0994d067391727cf53a60a5ca1b31c38b110047b5fb7bc424c28cf3da2
-
SHA512
e3a54b157b7da70215e6de747ae118287baf71f6d81637d2a0231a31bef2852af57e230de533962312abd44c911262abc455aa51ae488dfd46772990f7ebbfc2
Static task
static1
Behavioral task
behavioral1
Sample
PO Pedido de consulta RFQ1120020211001.exe
Resource
win7-en-20210920
Malware Config
Extracted
formbook
4.1
s3dy
http://www.livelifevibrantcourse.com/s3dy/
ravlygte.info
marketnewsville.online
flooring-envy.com
flavourhouston.com
donghohanghieunam.com
globleitsolutions.com
digitalgraphicarts.com
cupidbeautybar.com
cannavybes.com
negative-dsp.com
littledali.com
meltwatersoftware.info
blackdogland.com
danasales.com
mississippiscorecard.com
mainesmoker.com
sirenxinlilzixun.com
tychehang.com
gentciu.com
weckloltd.com
posy-socks.com
smp2kroya.com
clientacceleratorchallenge.com
erlacollection.com
027tvs.com
thisdw.com
nonosmell-store.site
underadress.com
principal.properties
ministyles123.com
readtohappiness.com
roostercollection.com
veteransinfrastructureparks.com
theminiverse.com
auto-expresss.club
ciaokitchenandbath.com
sbsfresh.com
onesheart111.com
artofquiet.info
atecwtec.com
scars-finder.online
luckbaanasset.com
vegaguzmanstudio.com
destinedtowander.com
genesaloe.info
shirewindowcleaning.com
dwadawdf001.com
mividaurbana.com
outsiders.house
secondhandcare.club
1031exchangeintoreit.com
zenyoustore.com
bahissikayetvar.net
platforms.trade
dasmusstduhaben.com
frankplex.design
thesiblingsoiree.com
18sdsd.com
oneninelacrosse.com
hdsllawfirm.com
rawrequest.com
jetsetterlifestyle.luxury
karenmendell.com
aspydad.com
Targets
-
-
Target
PO Pedido de consulta RFQ1120020211001.exe
-
Size
634KB
-
MD5
5b15b475681f29f6819194e1dbe189c3
-
SHA1
20fe2955ab3f46646d0ad3e73ed7527fc73302a4
-
SHA256
bd838c03d3ec42b59246427e17f5421d564148e902e190e94c1673f0a89bf473
-
SHA512
afb22234aadc7ec1c44a7691eb78b47897d28ef4c6fd1725312e250dcbc6518ad8203f759980592f9ea218499702219a39d4b86f5050d24c9044e5f2e07c881a
-
Formbook Payload
-
Deletes itself
-
Suspicious use of SetThreadContext
-