General
-
Target
SecuriteInfo.com.Trojan.Mardom.MN.24.312.128.exe
-
Size
426KB
-
Sample
220922-fsjvbsaag3
-
MD5
61505e9f2d97d299325d3653491232ee
-
SHA1
46a76689fbefcb2845681aaf6e9c5446928f0ad9
-
SHA256
92da95e0d9976f11d4948b310dbb72cd7823f93eef5bc2bf56a1626b7e919819
-
SHA512
a21ae916d5faffe558426387f76a15f8ca7f8bcbeb7d205c18f78022f0803bc1e9e2973b3d6d15ba540b2f1c0237c552e5506859a6d3a5eff0f4c13f2fb14669
-
SSDEEP
12288:++coR70Vq+Nw4+Gra2Qk2xvvDI8Bpsy6F:iq+Nw4PrapFxTI8HsyE
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Mardom.MN.24.312.128.exe
Resource
win7-20220901-en
Malware Config
Extracted
formbook
ermr
ErOK6LFCgNIAlQmH54oaYOL/CN29Z78=
qNSdDhu/PT/1fgafDagiCSZH1SY=
wLpPOAkYS8EABl3pHGc4hNT/Q1sHBrU=
jSxRvptHkeTGl7PT0SEmaZmjqzanuA==
b91oL+2wCcpyhnd6yvF6Pg==
mr81yp1/qqZX
hy7Xsz/PU/LWHMcGL4UYJx9n3A==
KlwrHt1gouPaXaWhoQ==
ng8M320IRJL9Ptw=
8GQbOXuaWxvKnNM=
XndOL7E5sNpVUNty4d/a
rryPBBC8PybYb+2h2MF3FHGL
kEoeyERSVCYO0g==
5/P+SBDby5hO
1fYXc30/h9W7iO17
34X+YKR+wRFE
8ir/X2MlVByh5lQ1ow8=
u9ikm2UMZ7J7hpCYow==
FLI+c3clp1BNDjVAfvC2Dnw=
t21Erq8/r09wAzAJTAH3Ng==
VAg3gU1KH9uW3YIPAgc=
Gjlc09d6qurdLePSLZktDmGA1A==
MMraOD3ve5odaf+03cB3FHGL
mLRTTAycMcrHgomShQHVwfFKkGQaehvF
fpab65mlchvKnNM=
M6jUQU0omipqaUNXyvF6Pg==
S/XrNQGVvwUsSnKFyvF6Pg==
LeC0GeF2zvCosNtMx5RltjCD
Y+IGYC/XHS63wIus5n08ADN2qzanuA==
3tJus7Rc6OtWnx9y4d/a
4uSOYiXhGxumZcTLuA==
5PyP2thOiIucXaWhoQ==
6978Rw3FNTibYVQ1ow8=
3Ah90lcSVCYO0g==
V/UQWRsOOQjDye9m0cLQ
yRXcMfySzTmEhddhqljeGH8=
vWuKFZKZ48E=
8+UEda631IpZ
LUofBqVNdT/v+MXiEWm90Ape3g==
NCi29RHdDYd7hso=
i36jBdNko/HyUKg1eWYgJx9n3A==
vdblMhHYSkgDmBly4d/a
oQmZH6K31IpZ
fCBHqaFGx9OUMMuBr5GWDXXY5DAT
FDXweHcHVCYO0g==
qSQd9bd7BQavQ9NbcUT+O6e4OGsaehvF
vN98englU4HHzqi36ju/91SJ
prTUIBi6MhiXZFQ1ow8=
w008jVXdCYd7hso=
p1kghFnjD9iADog5cVDmvrDiTjk=
xLjHJFYDQL+ysdk=
6tiR9MZa9xSMXVQ1ow8=
WMzXJPGcyIrP2g==
SeI4PsQ+N/O0iMs=
+4o0lKRDsz+RUqpoBvt3FHGL
AHQG4ZsybzCo8ZlBs1jeGH8=
kIgR46ls4wiGUJZLtFjeGH8=
b/fmPTHIRhvKnNM=
lTL5XnA4eKLb4snpHXt2s/MaSVsHBrU=
psOQcAKjHxyFw0vIwrZ3FHGL
F806xNnby5hO
7t72ZXkhmSAc8xLYD4J2XXc=
Ihmk3OR96/2HSbdi
ea/NKy3VVcx7hpCYow==
ifair.ltd
Targets
-
-
Target
SecuriteInfo.com.Trojan.Mardom.MN.24.312.128.exe
-
Size
426KB
-
MD5
61505e9f2d97d299325d3653491232ee
-
SHA1
46a76689fbefcb2845681aaf6e9c5446928f0ad9
-
SHA256
92da95e0d9976f11d4948b310dbb72cd7823f93eef5bc2bf56a1626b7e919819
-
SHA512
a21ae916d5faffe558426387f76a15f8ca7f8bcbeb7d205c18f78022f0803bc1e9e2973b3d6d15ba540b2f1c0237c552e5506859a6d3a5eff0f4c13f2fb14669
-
SSDEEP
12288:++coR70Vq+Nw4+Gra2Qk2xvvDI8Bpsy6F:iq+Nw4PrapFxTI8HsyE
-
Suspicious use of SetThreadContext
-