General
- Target 96c7077889ab23b8df01bca77a45a4df
- Size 715KB
- Sample220412-s37elagcc5
- SHA256 2dac503b9c06d06387e62a41fe9f9e179df1aba575a3b2aece6d508b7c2e0d4f
- MD5 96c7077889ab23b8df01bca77a45a4df
- SHA1 b58466cfcd6769fdf2ac783b0cbe149d09fb6cb9
- SHA512 450c93580598af0e08b8d0642d37ba55edf474d3b48b9b0fc1deba02f8e77d281a9b9aaed5ae05540e4544e032e9a0d24cc31387e7cba70310f37fe76e8cd702
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
96c7077889ab23b8df01bca77a45a4df.exe
Resource
win7-20220310-en
Malware Config
Extracted
-
formbook
-
4.1
-
g9s4
-
visitmechanic.com
-
xn--kck4a7gpd474vx6i.com
-
prozdorovie.online
-
omatpupa.xyz
-
zamokwakhekhumalo.com
-
mayuraandchris.com
-
wanasahstore.com
-
bicicletas.win
-
yhdm61.com
-
mortgageattract.com
-
centuryofbio.com
-
xtdkgjt.com
-
nhahangnetnghe.com
-
whatsappsemcontato.com
-
onlinemarketing-teamwebus.com
-
zuevu.com
-
dancaronmusic.com
-
tingseo.com
-
uniflapline.com
-
setuppharmaweb.online
-
tunerdiesel.com
-
jetfreqs.com
-
magnusempire.com
-
lxmetal.ltd
-
ldexhibit.com
-
takainna.com
-
vaocation.com
-
jk0078.com
-
youniversoulconsciousness.com
-
healthcarehaven.com
-
sorecly.online
-
prosale.xyz
-
klevr.tech
-
kaderarslan.com
-
selmagreen.com
-
peoplesbank.xyz
-
codekaro.com
-
7882.direct
-
vglyph.com
-
uznalimoskwa.xyz
-
valeriemariotte.com
-
m2review.com
-
roamkyoto.com
-
shilohscentral.com
-
helmpartner.com
-
beindaily.com
-
hvacbodles.com
-
lacky-traveler.com
-
agccapitalsolutions.com
-
tussuncivky.xyz
-
incorp18.com
-
northernfernlifestyle.com
-
thought-full-ness.com
-
riobetcasino-qi.xyz
-
cloud-scanifly.com
-
scheveningenbnb.site
-
asphaltlake.biz
-
hanleydevelopments.com
-
indosloter88.net
-
keyuchen.site
-
infoborges.tech
-
dampits.biz
-
suicideuas.com
-
cabinnap.com
-
tibetcnm.info
Targets
-
- Target 96c7077889ab23b8df01bca77a45a4df
- Size 715KB
- SHA256 2dac503b9c06d06387e62a41fe9f9e179df1aba575a3b2aece6d508b7c2e0d4f
- MD5 96c7077889ab23b8df01bca77a45a4df
- SHA1 b58466cfcd6769fdf2ac783b0cbe149d09fb6cb9
- SHA512 450c93580598af0e08b8d0642d37ba55edf474d3b48b9b0fc1deba02f8e77d281a9b9aaed5ae05540e4544e032e9a0d24cc31387e7cba70310f37fe76e8cd702
- MD5 SHA1 SHA512
-
Formbook Payload
-
Suspicious use of SetThreadContext