Behavioral task
behavioral1
Sample
860942d3b0190341282f2ae2d76d65f0374698fc48852aeda79966130bd68216.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
860942d3b0190341282f2ae2d76d65f0374698fc48852aeda79966130bd68216.exe
Resource
win10v2004-20221111-en
General
-
Target
860942d3b0190341282f2ae2d76d65f0374698fc48852aeda79966130bd68216.exe
-
Size
181KB
-
MD5
6036aa1bb059db77e67d0163c0d23f49
-
SHA1
19ec478159081f73ef92bf2ab3a6d96d7d323062
-
SHA256
860942d3b0190341282f2ae2d76d65f0374698fc48852aeda79966130bd68216
-
SHA512
bcf50cac444c84e6fd970f59d007b75f18083d1938e55c9fd5ed2331af2bd5dd04b68b56a3228c257530b16b694e99084f862db0255c5fd86a4412ce51d32c9a
-
SSDEEP
3072:5Go6CkmJlwL7Vx39cQ95fgbEEvcbIKVm1xhRXloxIL7:i6uBt9d9NgbEEvcbIKIxRaxIL
Malware Config
Extracted
formbook
4.1
fh11
dejeucrew.com
naijacash.africa
hhnego.cfd
freeentitys.com
acestrix.com
family-doctor-38536.com
kelleyhomegroup.com
ridamedicalsupply.com
ease.dev
moneyerase.com
ax-assess.com
dexzec.com
lazada.cool
themontery.africa
4help4all.com
fxfreedom.vip
twitterabout.com
kensingtonbuisserv.co.uk
488677.vip
akfomtechnology.com
blankmanentllc.com
delightctasst.top
tumaqe.xyz
elixiar.world
lovesextrapstar.com
camisetasdefut.online
skf-omt.com
betterplushealth.com
advocatehealth.app
engagementstefanini2022.com
gaslyoutlet.co.uk
caffeinnepia.com
ozyhost.net
ktvpro.net
delightpabca.top
gabriellewmfunk.com
xy038.com
eddyspedizioniit.online
buttercloud.online
aa011.top
hair-transplantation-68221.com
fulait.com
developersuspension.com
laris.uk
invco.uno
amaruspirits.com
clothopedia.com
rejuvenateshop.co.uk
future-direct.com
bewiseracademy.com
bellanight.net
ipaintdk.com
katkott.com
health-move.com
luxurymart.africa
caffeineoil.com
holidaygolfalgarve.com
hypnotherapypennsylvania.com
websiteclonescripts.com
bigbenssammies.com
frjanitorial.com
transfercosts.africa
growrech.com
khonkaeninnovationcentre.com
glamourpetals.africa
Files
-
860942d3b0190341282f2ae2d76d65f0374698fc48852aeda79966130bd68216.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ