General
- Target lista naloga za kupovinu.exe
- Size 732KB
- Sample220304-ssf5nafbd8
- SHA256 42dfb1aeb19afac4595bc0146dd42ee251896ea1bf3ea8ab05d4bd28a7edbed1
- MD5 3c5f54d4e4b7aa203fd1d27e73428750
- SHA1 a6c97722938a05ad3ef3c3acdda0aeb19c579ba5
- SHA512 c9409857a1378fa844a10ed18c766eaff181642c4000d8f1e6962b302d3729b7516c4d05467429057675c271c7517ffcc925fca99443bec22a3419edbca627b9
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
lista naloga za kupovinu.exe
Resource
win7-20220223-en
Malware Config
Extracted
-
formbook
-
4.1
-
3nop
-
videohm.com
-
panache-rose.com
-
alnooncars-kw.com
-
trueblue2u.com
-
brussels-cafe.com
-
ip2c.net
-
influenzerr.com
-
rbcoq.com
-
zzful.com
-
drainthe.com
-
sumaholesson.com
-
cursosaprovados.com
-
genotecinc.com
-
dbrulhart.com
-
theapiarystudios.com
-
kensyu-kan.com
-
dkku88.com
-
tikhyper.com
-
aztecnort.com
-
homebrim.com
-
infinitilamp.com
-
leelegantflower.com
-
floor-space.investments
-
vidasustentavel.online
-
wholehearteddaughters.com
-
vipandeep.com
-
mdwovzrrm.icu
-
592215.com
-
academicplumbing.com
-
bestveganbook.com
-
theservantleader.com
-
nazarickdeveloper.xyz
-
delta-wing.com
-
girlfriendsgarb.com
-
sezyz11.com
-
ca3construction.com
-
smartswitchhomeloan.net
-
luckytwo.agency
-
ministry-of-barbers.com
-
babbageacademy.com
-
informationside.com
-
packapp.net
-
spacecoasthondaevent.com
-
thehealthyimmunereset.com
-
pjcavaliere.info
-
trebdurham.com
-
zhixintonghe.com
-
gon2580.com
-
dottproject.net
-
snakby.com
-
keeponsports.com
-
debbiewilsondesigns.com
-
stagingsolutionsgroup.com
-
forummondialdelamerbizerte.com
-
garnier.red
-
tempestchs.com
-
zpxinxi.com
-
jam-nins.com
-
inclusiocg.com
-
msmenders.com
-
whachupichu.com
-
pursemore.com
-
thebusinessfitclub.com
-
scootgotti.com
-
jakesplacebarbers.com
Targets
-
- Target lista naloga za kupovinu.exe
- Size 732KB
- SHA256 42dfb1aeb19afac4595bc0146dd42ee251896ea1bf3ea8ab05d4bd28a7edbed1
- MD5 3c5f54d4e4b7aa203fd1d27e73428750
- SHA1 a6c97722938a05ad3ef3c3acdda0aeb19c579ba5
- SHA512 c9409857a1378fa844a10ed18c766eaff181642c4000d8f1e6962b302d3729b7516c4d05467429057675c271c7517ffcc925fca99443bec22a3419edbca627b9
- MD5 SHA1 SHA512
-
Formbook Payload
-
Adds Run key to start application
-
Suspicious use of SetThreadContext