General
-
Target
Confirmarea platii.Pdf.exe
-
Size
821KB
-
Sample
220129-kqgpeahbd6
-
MD5
c93940644125559a6aa5f89f532066b8
-
SHA1
9e80136c79abe4072b9629fb57f19c2692dc33a8
-
SHA256
b76cdf3f203937fdd5a57710faf9c4d78281f4b893e8caff17a5053bb741bffc
-
SHA512
2c5eee79d2b488cdf1ec10d0fe295dc87fcb3383665bd072174571cdc6feeb7531a329861eaabd9838799fca633203b5dc7d98a535123bd7a4ba458c5f42c0af
Static task
static1
Behavioral task
behavioral1
Sample
Confirmarea platii.Pdf.exe
Resource
win7-en-20211208
Malware Config
Extracted
formbook
4.1
d2g7
inviteonlyme.com
noashopping.com
raysyoutube.com
chicagp.com
brnguatemala.com
speechboutique.com
philippinepodcastdirectory.com
konnecio.com
9q1ng6.icu
treez.info
appleiclou.com
pettras.com
txherz.icu
freearcae.com
mindpetalsoftwaresolutions.com
my-beautiful-switzerland.com
hpzebike.online
fadsekclub.xyz
newcastledhaka.com
varidsk.com
micursodebelleza.com
neoikos.com
dansilhavy.com
tuagenciademarketing.com
lennyjewelry.com
nomorewinters.life
hvmoon.com
showmethemoneyy.com
the180legacy.com
bearberry-extract.com
leophorm.com
designitumudah.com
212mask.com
globalsky.zone
chincoteagueebikerentals.com
yunsfu.com
kellerwilliambenefits.com
klaunster.com
lk5d3.com
wathft.online
stayweightfree.com
pouchseat.com
lebensraum-beratung.com
luokaihao.art
weldtechinstitute.com
howdy.chat
timioscorp.com
clientes-ayuda-numero.site
motorcycleinsuranc.com
hwbuc.icu
divinggarden.com
favorru.com
hospitalbe.com
cencat.net
saos45.com
cardealsherein.com
kelp.email
orderrosysmexicanrestaurant.com
nexxtgencorporation.com
5ghfbdfgerg.com
theannunziatagroup.com
swisshoneybee.com
4799cf.com
kingfisherexperience.com
freshlyhair.com
Targets
-
-
Target
Confirmarea platii.Pdf.exe
-
Size
821KB
-
MD5
c93940644125559a6aa5f89f532066b8
-
SHA1
9e80136c79abe4072b9629fb57f19c2692dc33a8
-
SHA256
b76cdf3f203937fdd5a57710faf9c4d78281f4b893e8caff17a5053bb741bffc
-
SHA512
2c5eee79d2b488cdf1ec10d0fe295dc87fcb3383665bd072174571cdc6feeb7531a329861eaabd9838799fca633203b5dc7d98a535123bd7a4ba458c5f42c0af
-
Formbook Payload
-
Suspicious use of SetThreadContext
-