General
-
Target
e-dekont.html.exe
-
Size
322KB
-
Sample
221207-nxjdcsgf61
-
MD5
55118de0c492e1425cb3ef8f27ed7124
-
SHA1
2d7a0eee423509129264dce5266c13e0c67e21d3
-
SHA256
6e8de74475e365bdd0f573a03266f447a13f30a76cc2c71d14c1fc5607e1ae5d
-
SHA512
b14b1a918f1760558c5cc4437c1d1626f0c77aa28c3f2fae89985dda4f64f426d0a28b9ccee8e6687472f29a914ccf8e710950898ba0f09e484189e1e7bfd407
-
SSDEEP
6144:QBn1X1benXIzx6/7YMovhl5nqvEQqVX8QYaTttAFvnkU/Vdcf757dpqXbUA0hO:gX1aF/7YZ35n4EQq9zyvz/aVZpqXD04
Static task
static1
Behavioral task
behavioral1
Sample
e-dekont.html.exe
Resource
win7-20221111-en
Malware Config
Extracted
formbook
4.1
mi08
mytimebabes.com
ycpxb.com
abdkaplani.com
cloudingersoftech.com
fthfire.xyz
christyna.work
3d-add-on.com
knowyourtechdeals.com
kcl24.com
sepatubiker.com
sunnyboy.live
zrbsq.com
rinpari.com
lesac-berra.com
yes820.com
cnnorman.com
mystichousedv.com
sbobet888auto.com
gawiul.xyz
luispenas.com
whdchb.com
094am.com
fkwjs.xyz
batobo.online
mathswatchbot.com
bereketvadisi.com
additionmovies.xyz
zgqc168.com
xamango.com
1cpi1s0u7qcuj1xus5cg1fezo1k.com
b4xy.top
owicz.com
impulseamtt.com
247plumbers.monster
tradersource.online
decrimatx.com
my-vero.com
zgshdbhy.com
cab24seven.com
adultnnewspalace.com
volpi-venture.com
pixpotengi.link
zzjyswx.xyz
xn--90aiiithifm8h.com
nextdaybannerstands.com
uniquehandicraft.store
securityapp.top
mugexpert.net
magaa.xyz
omegaverse.wiki
owlsomeclothing.com
pegasuspadel.club
d-esig-n.site
alrate.top
simplyhillpisya.monster
mentawaisurfboat.com
nwjfypy.xyz
pgcbl.online
adultarivaj.com
juicyhookahinc.com
thewisestonellc.com
it32mgn.store
coco-vista.com
cremation-services-53998.com
grassi.uno
Targets
-
-
Target
e-dekont.html.exe
-
Size
322KB
-
MD5
55118de0c492e1425cb3ef8f27ed7124
-
SHA1
2d7a0eee423509129264dce5266c13e0c67e21d3
-
SHA256
6e8de74475e365bdd0f573a03266f447a13f30a76cc2c71d14c1fc5607e1ae5d
-
SHA512
b14b1a918f1760558c5cc4437c1d1626f0c77aa28c3f2fae89985dda4f64f426d0a28b9ccee8e6687472f29a914ccf8e710950898ba0f09e484189e1e7bfd407
-
SSDEEP
6144:QBn1X1benXIzx6/7YMovhl5nqvEQqVX8QYaTttAFvnkU/Vdcf757dpqXbUA0hO:gX1aF/7YZ35n4EQq9zyvz/aVZpqXD04
-
Formbook payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-