General
- Target 4aa1142a3f569b23158f637ffb90d9ee
- Size 242KB
- Sample220321-p8n9escdb2
- SHA256 df9fe11c039698ca36c7d81bd75de8700aacb67e4ce98b9df0ceaa2fe6d2c623
- MD5 4aa1142a3f569b23158f637ffb90d9ee
- SHA1 9e9c1dd646db8575d8e67275b57349f26fbbc8c6
- SHA512 a0915c8377145346712e42413bad4bc9e8c11e100bfebdc20c7f9056d17744b0f65872e4956a7724c6ff0a0f3a463bd4b8980f7182ae7958b4394ffdf5f02afa
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
4aa1142a3f569b23158f637ffb90d9ee.exe
Resource
win7-20220311-en
Malware Config
Extracted
-
formbook
-
4.1
-
sh30
-
raptorwin.com
-
mmwavesolved.com
-
coachingwithcc.com
-
ssvminc.com
-
celdegobierno.info
-
wpaci.com
-
denison.top
-
fdsff.com
-
kelsapur.com
-
pontodeacucar.com
-
tgbamg.com
-
hkserver.xyz
-
muscatrfc.com
-
gylslgzn.com
-
roses-rouges.com
-
stanleymediaproductions.com
-
mintplatform.store
-
mentalallyhealth.com
-
lezfilm.com
-
lucarbo.com
-
istdaswas.com
-
homiyes.com
-
ipvkxjge.online
-
webkeropy.online
-
jantungdesa.com
-
vedasattva.com
-
suparna.life
-
diswcwj.com
-
mrkalpaperera.com
-
agriwake.com
-
batataburguer.com
-
divinecanna.store
-
supportukraineshirts.com
-
besttoasterovens.net
-
lbapaudit.com
-
sh-womade.com
-
luiscorreiafm.com
-
c181.xyz
-
9sy2.xyz
-
firstlightdiscgolf.com
-
500cp35.com
-
ypdhn.tech
-
smmdesk.com
-
dinart.biz
-
nataliawebdev.com
-
567idid.com
-
aqshmgm.com
-
storkbucket.club
-
coffee-4u.com
-
institutoenlife.net
-
appleidb.com
-
lcdesigninguniversity.online
-
shopgenzee.com
-
psychonautics.space
-
financialadvisornearby.com
-
huanqiwangluo.com
-
ripper66.com
-
cutmyownhair.com
-
dronesutherland.com
-
westernwellscreen.com
-
ys9s.net
-
burnsir.com
-
kesrimarham.online
-
haztupaginaya.com
-
thecredit.school
Targets
-
- Target 4aa1142a3f569b23158f637ffb90d9ee
- Size 242KB
- SHA256 df9fe11c039698ca36c7d81bd75de8700aacb67e4ce98b9df0ceaa2fe6d2c623
- MD5 4aa1142a3f569b23158f637ffb90d9ee
- SHA1 9e9c1dd646db8575d8e67275b57349f26fbbc8c6
- SHA512 a0915c8377145346712e42413bad4bc9e8c11e100bfebdc20c7f9056d17744b0f65872e4956a7724c6ff0a0f3a463bd4b8980f7182ae7958b4394ffdf5f02afa
- MD5 SHA1 SHA512
-
Formbook Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext