General
- Target obizx.exe
- Size 542KB
- Sample220422-q2dd1scfe3
- SHA256 8936c1cd18e085f39f8cb1c4ebacd04573a291e555d420acfb4845320e401aae
- MD5 0defc11a963d8c25ab22aeccefed7564
- SHA1 989b504c0206753e5f5e7d4e9ed1370c7561959c
- SHA512 8f72685a979d59ef690b4bdfd2e2dd7618cc6df3dd953004e791105e694433816d40c6c8773e4930831936d25efed3e946b97fb05d27c8dd939620e8d7e39e51
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
obizx.exe
Resource
win7-20220414-en
Malware Config
Extracted
-
formbook
-
4.1
-
o20a
-
getplanda.com
-
wilmarrysteph.com
-
brandology.xyz
-
aseguranzas.online
-
ger.xyz
-
alibikoln.xyz
-
jmaisr.com
-
npydxwj.com
-
slotofun.net
-
marmpnthill.com
-
buildbostonbetter.com
-
tonealconsulting.com
-
hoteldhanashree.com
-
alignmentanalogue.site
-
arbasaa.xyz
-
jkesguerra.com
-
nrl4957.xyz
-
origine-workshop.com
-
ridstu.com
-
itaoshumiao.com
-
nhsteaming.com
-
tameema.online
-
botbets.xyz
-
pengusahalasjepara.com
-
vaduu.net
-
neewmovie.com
-
andreandradetattoo.com
-
bcbei.info
-
onecopikta.xyz
-
golfoys.com
-
florencegingerfilms.com
-
seawell.xyz
-
360helpsell.com
-
shoppollgear.xyz
-
nowuvme.com
-
hinterlanddemolition.com
-
rosentholtl.com
-
alternativeconcretesurfaces.com
-
faerical.online
-
iberso.com
-
sannomaru-tsuusyou.com
-
therealmicbofficial.com
-
hjcw188.com
-
alabamachildrenstheatre.info
-
have-autoinsuranceindia.com
-
streitfeldlawpllc.online
-
vpdigittmailserver.agency
-
detailerfestbrasil.com
-
sonouchidandyism.com
-
soaringtaste.com
-
federalcloudsolutions.com
-
duliichkhatvongviet.com
-
thelashwaybyj.com
-
revertatrade.com
-
myshitneighbor.com
-
compellingdroneimages.com
-
estructurasalfa.com
-
union-bank.club
-
greenuplawnmanagement.com
-
westajofeedandsupplies.com
-
windchimesjaipur.com
-
eliclinic.com
-
panglobalas.com
-
bravoentertainmentgrp.com
-
foodieflavour.com
Targets
-
- Target obizx.exe
- Size 542KB
- SHA256 8936c1cd18e085f39f8cb1c4ebacd04573a291e555d420acfb4845320e401aae
- MD5 0defc11a963d8c25ab22aeccefed7564
- SHA1 989b504c0206753e5f5e7d4e9ed1370c7561959c
- SHA512 8f72685a979d59ef690b4bdfd2e2dd7618cc6df3dd953004e791105e694433816d40c6c8773e4930831936d25efed3e946b97fb05d27c8dd939620e8d7e39e51
- MD5 SHA1 SHA512
-
Formbook Payload
-
Deletes itself
-
Suspicious use of SetThreadContext