General
-
Target
da00ad76bb648365108fb03a95cf69a56608e4605cfe02fcaf933af239ce7ac2
-
Size
514KB
-
Sample
220131-lcj32sghej
-
MD5
3dd400266e418778615ef84a247687d1
-
SHA1
995b055ae2eb4f7ed8dd0d603cc3690a2bbe5c3c
-
SHA256
da00ad76bb648365108fb03a95cf69a56608e4605cfe02fcaf933af239ce7ac2
-
SHA512
8a202b59dc234c35a4538c2040ba3b2855df073ef3f32ce06fa7f784f22971362a4efd98ff2a41cb7a3b77ad6f6c840b00fcc55f8662ab10d9edf3d38d8bc16e
Static task
static1
Malware Config
Extracted
formbook
4.1
cw22
betvoy206.com
nftstoners.com
tirupatibuilder.com
gulldesigns.com
shemhq.com
boricosmetic.com
bitcoinbillionaireboy.com
theflypaperplanes.com
retrocartours.com
yangzhie326.com
cheepchain.com
sentryr.com
luckirentalhomes.com
pointssquashers.com
dianasarabiantreasures.com
calendarsilo.com
sublike21.xyz
gajubg0up.xyz
lousfoodreviews.com
fades.site
276a.xyz
chopkingstamp.com
parcelfrance.com
lcntrust.com
aeeg-austria.com
trogen24.net
widepeepohappy.xyz
hogekortingen.com
trump-is-right.net
legacyfarmsgeorgia.com
dingbuzhule.com
teckelgruppe-raben.com
qianshuhua.com
onsdia.xyz
sectorquant.com
automatenstudent.com
bathkithcenandtile.com
lasvegasphonerepairs.com
riselsat.com
myvafterdark.com
whispersystems.net
technicolorday.com
renetextile.xyz
cchcolo.com
professorjoshi.com
capybarashop.com
alfredoreyessci.com
w124blog.com
vdsdev77.com
helloentepriseg1.com
denlab.net
triviamillionairewin.com
jelofly.com
09m370uz.xyz
reple-top2.com
riosgames.xyz
teaberryadvisors.com
satgerv.online
galenika.net
landspeedlogistics.com
familiesgivinghope.com
moisuhop-channel.xyz
chambres-d-hotes-marrakech.com
realizefinanceirorennerr.com
playthemove.info
Targets
-
-
Target
da00ad76bb648365108fb03a95cf69a56608e4605cfe02fcaf933af239ce7ac2
-
Size
514KB
-
MD5
3dd400266e418778615ef84a247687d1
-
SHA1
995b055ae2eb4f7ed8dd0d603cc3690a2bbe5c3c
-
SHA256
da00ad76bb648365108fb03a95cf69a56608e4605cfe02fcaf933af239ce7ac2
-
SHA512
8a202b59dc234c35a4538c2040ba3b2855df073ef3f32ce06fa7f784f22971362a4efd98ff2a41cb7a3b77ad6f6c840b00fcc55f8662ab10d9edf3d38d8bc16e
-
Formbook Payload
-
Suspicious use of SetThreadContext
-