Behavioral task
behavioral1
Sample
320-64-0x0000000000400000-0x000000000042F000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
320-64-0x0000000000400000-0x000000000042F000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
320-64-0x0000000000400000-0x000000000042F000-memory.dmp
-
Size
188KB
-
MD5
c3275f2a9a1d3bb69cdb5352b670a746
-
SHA1
548192eec7cebe4219c36e8a971d0add45f39759
-
SHA256
d15dfacb304f09aaa4e1eca88c0ace6d290e0396213d4a3266a087f13b013d3c
-
SHA512
647fa51c8f5ee8cc6d193e193fa402eba4f80805c497743b2b87131099e10d4a925751dee668f9704f6adaf75822352a4d8d989db6bab408afdd288ac3a2abf5
-
SSDEEP
3072:XJMh/k0IuHkJW39L09U2iqOGMpMv3QMrvrZ9eJ6+rZZ6:iRIA9w9ziqOGMmvVZwsm
Malware Config
Extracted
formbook
4.1
upa6
farmaciadelverde.com
1whcfc.top
djameshomes.com
kylepauley.social
dawncharitabletrust.com
leverdurable.com
bluxban.online
oceansideglass.net
pcdcompusoft.com
dlunion.net
continuumadvisorypartners.com
tvlfood.com
pillblue.co.uk
1win-site-3.top
e32mbe.shop
mawelk.xyz
garage365.online
commonwealthbank.online
xw-04.com
smartcitiesrecruitment.co.uk
1wehuc.top
dydx.ltd
signssouthport.uk
tirumanam.rsvp
glenhome.org.uk
chiscocity.africa
butshuimuch.com
betkfurniture.com
palworld.net
louiserafton.co.uk
gevorgianvocalcoach.com
furioutgfb.space
cocohouselabarra.com
weddingplannerguide.africa
frioriver.net
doscervezabebidas.com
nigerianewscentral.africa
chenyuxi.love
4zk.xyz
druckrohrsanierung.info
hgaerosquadron.com
mediadl.net
arthalloys.com
angrygoosegear.com
adopt8x.com
enchante.fun
ivhydrationbarplus.net
1whfch.top
greenvibes.community
calculator-kasko-spb.ru
alanducnguyen.com
590nightingale.com
ilmagazzinodigilgamesh.com
huynhi.info
feiduyang.com
laundryemas.top
coalbros.com
intretechw.com
aurabodystudio.com
mwordconsulting.co.uk
cj-optic.co.uk
hyperjmp.com
asty668.com
efefhabitual.buzz
fanvilintercom.com
Signatures
Files
-
320-64-0x0000000000400000-0x000000000042F000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ