General
- Target PRODUCT LIST.exe
- Size 592KB
- Sample211111-lar1wabac9
- SHA256 ac021bbe155b54ac93bd5ca40b6ca6130174d6d192c6fd2011e9677d56c09f4d
- MD5 d403ceb699085cfd12ada96aa419a37b
- SHA1 8c9831b837374d718e24d35ec7e93f642a2b74ba
- SHA512 7c549efb3103fde42fe6cd46d6126846aa24afd29856bd59fcb5d66a0ae3854fc7d52902ddb8e7effac86929aa081c26a82e0b4ee1ce9c617919a5e774a10d68
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
PRODUCT LIST.exe
Resource
win7-en-20211104
Malware Config
Extracted
-
formbook
-
4.1
-
r4gk
-
http://www.aprilsaak.quest/r4gk/
-
quantalix.com
-
animalblog-eggs.com
-
039skz.xyz
-
guttas.net
-
lasantadayparty.com
-
protegerfinanceservices.com
-
vixtest.xyz
-
digitaleconomy.global
-
0xpax.xyz
-
mobilehome1688.com
-
themotionpartners.com
-
valueney.com
-
hattuafhv.quest
-
js0061gj.net
-
360metaverse.biz
-
seculardata.com
-
346727688.xyz
-
smartmapom.com
-
moksel.com
-
exoduswatchco.com
-
cryptopazar.com
-
constructioncdr.com
-
teamlsu.club
-
vitalflowscam.com
-
participatetn.info
-
daysyou.com
-
beautifulhandwriting.net
-
risccredit.com
-
coachingwithkyle.com
-
tedthemusicguy.com
-
theukulelejournal.com
-
enpratikyemektarifleri.com
-
reaching-far.com
-
investmentcomp.com
-
digitalzonecorp.com
-
internet-treat.com
-
oligopoly.club
-
thepropertiesmatterlawfirm.com
-
jsi.money
-
8mlcvtd4y.com
-
tjc075kcn.xyz
-
floribunda.space
-
clinpic.com
-
zhizhengsf.com
-
thebestsmartphones.com
-
robertaeelton.com
-
upcxi.xyz
-
graywolfdesign.com
-
elitespeedco.com
-
asia99.asia
-
021parkert.com
-
seo-clicks7.com
-
com103940689794.icu
-
thegisguru.com
-
api-22nnys.com
-
srothientu.com
-
hfhcatering.com
-
strukuwehtet.quest
-
extramovies.quest
-
monamodda.com
-
markbuyskes.com
-
smartar8.xyz
-
illarrivelatebut.space
-
gestionestrategicadl.com
Targets
-
- Target PRODUCT LIST.exe
- Size 592KB
- SHA256 ac021bbe155b54ac93bd5ca40b6ca6130174d6d192c6fd2011e9677d56c09f4d
- MD5 d403ceb699085cfd12ada96aa419a37b
- SHA1 8c9831b837374d718e24d35ec7e93f642a2b74ba
- SHA512 7c549efb3103fde42fe6cd46d6126846aa24afd29856bd59fcb5d66a0ae3854fc7d52902ddb8e7effac86929aa081c26a82e0b4ee1ce9c617919a5e774a10d68
- MD5 SHA1 SHA512
-
Formbook Payload
-
Suspicious use of SetThreadContext