General
- Target ConsgnmentDetails_pdf.rar
- Size 318KB
- Sample220321-vp2y3adce2
- SHA256 5c7b19909f8b21be671f0431995f0cc30a58e37d6502fe12d685dad3d5ec3d6c
- MD5 5a9a9d723a1c6f60cc850a5c60d91523
- SHA1 c6f7d6859018a8bb6d278c6af40f062a2cf8d68d
- SHA512 1ef5ff5bccde2a88694f8756afedfca057ab5e9eb65e0c468c1948e45f73ed49845ccfe3c6105b5b2e13382f000ccc5dd0927298d4e6de4ff49ee429bfc15326
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
ConsgnmentDetails_pdf.exe
Resource
win7-20220310-en
Malware Config
Extracted
-
formbook
-
4.1
-
e0l9
-
packingfairturkiye.com
-
khenonline.com
-
mydactil.online
-
coriliechty.com
-
canadazk.com
-
freeloanseva.com
-
successvideo.today
-
infinitelifetransformations.com
-
unicryptdoge.com
-
ecolifeco.com
-
luxefashionaire.com
-
lqctqtal.xyz
-
liveexim.com
-
happyhempbakery.com
-
paypalverifie.com
-
wingonvacations.com
-
flawdogs.com
-
shalomsingapore.com
-
ruscc.xyz
-
yaxi868.com
-
hizika.com
-
joansbestshop.xyz
-
xfcad20.icu
-
kosaz.online
-
noticejcb.xyz
-
njpropertyrecors.com
-
positionme.site
-
rommyarf.com
-
vacumeet.xyz
-
societalsystemic.com
-
securitenovo.com
-
kingstreetlife.com
-
ridgwayracing.com
-
ndcqchc.com
-
rever-age.com
-
green-stone.solutions
-
idyijr28j.xyz
-
dailyjointhealth.com
-
computevault.com
-
thetimewheel.com
-
hilutv.xyz
-
shanaesbeauty.com
-
cryptwo.xyz
-
andro.finance
-
steady.store
-
gangsha2001.com
-
wodev.biz
-
affinitybuzz.com
-
nfhotel.net
-
westfieldswetlands.com
-
fatflorida.com
-
room4rent.net
-
madamebet.com
-
ceonsolutions.info
-
non-transferabletokens.com
-
rsvip13cvx.xyz
-
sveshtivosak.com
-
budunkafunk.com
-
nginspection.com
-
newdealny.com
-
uc-usa.com
-
tuvanvaytien24h.site
-
5okx.com
-
menzelengineering.com
-
unityassetstock.com
Targets
-
- Target ConsgnmentDetails_pdf.exe
- Size 387KB
- SHA256 9069e86544837964ed4afb0e347a686aa94ae9ec59a31aa594b4c29162e3e28f
- MD5 d5b3a65bc7fbe5f72b3a8cbca1e7bfdc
- SHA1 7f2dc845b3a97587ad65c44fc7459145780d1d74
- SHA512 e607e6be7c860c0addf18327354988972d9afb4df95edcb864802aee3cc0ca762b5d3ec3cb86538bb8f39e072f6de47a1e6e2c527f2b49c562e7bc280c831a1e
- MD5 SHA1 SHA512
-
Formbook Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext