General
-
Target
0c20d42cbdc31d5b40846425b381c84761898abe3659ba221d2b8e9e213964a2
-
Size
560KB
-
Sample
211101-bnacwaddgj
-
MD5
9536e16deb13831cf97edebfc43c3794
-
SHA1
1664b14b033e31e03b94ce4b3d89d883a39a6222
-
SHA256
0c20d42cbdc31d5b40846425b381c84761898abe3659ba221d2b8e9e213964a2
-
SHA512
825b989b036fc8a6f07f7664eae5ff18c47c0e0623003f6e1fe4454dabfd334bc9ee2825e65d270598dfd0cee79fe4ede4e2e0e2813980a4e04f26459365e6bd
Static task
static1
Malware Config
Extracted
formbook
4.1
mxwf
http://www.zahnimplantatangebotede.com/mxwf/
orders-cialis.info
auctionorbuy.com
meanmugsamore.com
yachtcrewmark.com
sacredkashilifestudio.net
themintyard.com
bragafoods.com
sierp.com
hausofdeme.com
anthonyjames915.com
bajardepesoencasa.com
marciaroyal.com
earringlifter.com
dsdjfhd9ddksa1as.info
bmzproekt.com
employmentbc.com
ptsdtreatment.space
vrchance.com
cnrongding.com
welovelit.com
intercourierdelivery.services
ianwhitewrite.com
afcerd.com
beneficiodemedicare.com
gatel3ess.com
salesnksportswt.top
thewellnessloft365.com
totensa.com
jessicatheisen.com
snowtographers.com
executrainpr.com
puttypaw.com
popcorntimeipad.com
heyconi.com
llanoresources.com
ibusinesshero.com
1euro1ad.com
sparkleeapp.com
zhuxiugyh.com
calvinmaphoto.com
bjmaomao.com
isaacfujiki.com
zipwhipper.com
kontrollstutzen.com
hannaheason.media
zgcbw.net
letteringdagabi.com
kitefabrics.com
andherieastoffices.com
thewellnesstravelcompany.info
ohio.works
beacharita.com
alphamillls.com
sassandvinegar.com
usauber.com
ceylonherbslk.com
richardggreenhill.com
groupdae.com
jupiterccc.com
indoovo.com
sunnytheodora.com
gxpgfz.com
shoppandaxpress.com
heiboard.com
Targets
-
-
Target
0c20d42cbdc31d5b40846425b381c84761898abe3659ba221d2b8e9e213964a2
-
Size
560KB
-
MD5
9536e16deb13831cf97edebfc43c3794
-
SHA1
1664b14b033e31e03b94ce4b3d89d883a39a6222
-
SHA256
0c20d42cbdc31d5b40846425b381c84761898abe3659ba221d2b8e9e213964a2
-
SHA512
825b989b036fc8a6f07f7664eae5ff18c47c0e0623003f6e1fe4454dabfd334bc9ee2825e65d270598dfd0cee79fe4ede4e2e0e2813980a4e04f26459365e6bd
-
Formbook Payload
-
Suspicious use of SetThreadContext
-