General
- Target 6b739e1d35c38dd6b26a2c17d453746e.exe
- Size 627KB
- Sample220609-khly6aheb8
- SHA256 bef4d2b112f31aa4e400f8a578eb87817ea1acda68d219f7c5d4387ceaf432cf
- MD5 6b739e1d35c38dd6b26a2c17d453746e
- SHA1 2bb98d665f29c75c65f2e1b91b4d9d8f82a6fa36
- SHA512 07c251d4b11605891656d72b865b0cf3761871ca9f0f392bbd7ae4bfe7cfbac66b50a2a0443706f82e4e9fc0444d9ff2c017b3622a0f83057e93b3bb802ce990
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
6b739e1d35c38dd6b26a2c17d453746e.exe
Resource
win7-20220414-en
Malware Config
Extracted
-
formbook
-
4.1
-
e63z
-
solariefy.com
-
zw323.top
-
somei8.com
-
rukbrook.com
-
iu5w.icu
-
escrow-hk.com
-
onlinereviewmonitor.com
-
maxxaktiv.com
-
directecole.com
-
walkinmovies.com
-
zxxiangr.com
-
prvmagapromo.com
-
mozogaotaxi.com
-
paralegaltraining.life
-
hayatkulturvakifi.com
-
beltmnn.com
-
olqlovea.com
-
theupsstore881.com
-
galmfrenchbulldogsny.com
-
stphilcc.com
-
latestcart.com
-
atlantichightradition.com
-
qhcbn.com
-
chickendomain.com
-
super-famous.com
-
caerod.xyz
-
dsa.finance
-
account-violations.com
-
piragua.xyz
-
toolsowl.com
-
adtspecias.com
-
stani.works
-
cosistoreoutlook.com
-
climbhightreeservicellc.com
-
besthomexl.com
-
convertcrea.xyz
-
acijs.com
-
www-515151.com
-
elite-techsolution.com
-
donateful.com
-
rahamaneyah.com
-
kurtworkholdin.com
-
ruwaddental.com
-
myjasspa.com
-
thebigproduction.com
-
retail-gaming-needs.com
-
spaarhuis.com
-
africafashionshop.com
-
chaomibencao.com
-
xn--zlr00d.net
-
conceptostirling.xyz
-
grand-balaton.com
-
winner-8888.com
-
accordionartfestival.com
-
szzhxzs.com
-
scottishbeddingplants.com
-
lizmie.com
-
npr-technologies.com
-
matiany.com
-
brickolino.com
-
seniornannie.com
-
psd2monapplication-ca.online
-
thewavertreeco.com
-
elna-ferrite.com
-
unogps.online
Targets
-
- Target 6b739e1d35c38dd6b26a2c17d453746e.exe
- Size 627KB
- SHA256 bef4d2b112f31aa4e400f8a578eb87817ea1acda68d219f7c5d4387ceaf432cf
- MD5 6b739e1d35c38dd6b26a2c17d453746e
- SHA1 2bb98d665f29c75c65f2e1b91b4d9d8f82a6fa36
- SHA512 07c251d4b11605891656d72b865b0cf3761871ca9f0f392bbd7ae4bfe7cfbac66b50a2a0443706f82e4e9fc0444d9ff2c017b3622a0f83057e93b3bb802ce990
- MD5 SHA1 SHA512
-
Formbook Payload
-
Suspicious use of SetThreadContext