General
-
Target
PO-AM2307586.doc
-
Size
982KB
-
Sample
231022-wkp95sbf3y
-
MD5
58bbfc3f4971c44d3efb60e97299a5a5
-
SHA1
a487e3cbcc857afa70a3549c7820a4c75acb5c92
-
SHA256
ad4a9f03995ef8fa50027c10e69e9e8a814f21e89f1019f482ba8b859e079c68
-
SHA512
232558acd8cfc82304cedfedea8c55d73238e5d2f26fe84a45a203329b237670b344e73f89a3d74fee80ba4fe7da7dfd7f3e6597fb5449c23f99eb31d413c1ef
-
SSDEEP
24576:DbA0kMPWGK1nu6J2j7Sjxyei09Z/HhUGy16YzXoa+OyE+Dj1W6m+sykIsPAqnpus:p
Static task
static1
Behavioral task
behavioral1
Sample
PO-AM2307586.rtf
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
PO-AM2307586.rtf
Resource
win10v2004-20231020-en
Malware Config
Extracted
formbook
4.1
ge06
azaharparis.com
nationaleventsafety.com
covesstudy.com
quinshon4.com
moderco.net
trailblazerbaby.com
time-edu.net
azeemtourism.com
anakmedan3.click
bookinternationaltours.com
ulksht.top
newswirex.com
dingg.net
waveoflife.pro
miamirealestatecommercial.com
rtplive77.xyz
bowllywood.com
automation-tools-84162.bond
booptee.com
ebx.lat
gdlongzhong.icu
seoulbeautytw.com
bulgarianarchive.com
pojipoji.com
mochibees-wylie.com
ecoboat.world
eroyfw.top
centralngs.com
youtube-manager.site
eatlust.com
geutik.cfd
credit-cards-16215.bond
lodsoab.com
jon188.ink
52iwin.win
juanmafit.com
gamemuggaz.com
oneresi.com
pj69vip12.cyou
west-paws.com
chaineccn.com
mentiti.com
modeparisiennefr.com
skyboxpro.net
versebuild.xyz
luxpsy.com
nivaarnalawgroup.com
c091627.com
preppal.shop
narrativepages.com
yqsoysy.com
diverseindiatours.com
batcavela.com
ayyp300.top
daqtpt.cfd
livers-guardplus.com
chucobuilt.net
qianxz109.xyz
carat-automotive.com
hndswicco.best
workwithray.live
sxchenggu.com
sanpan010.com
fufe066.xyz
fakeittilyoumakeitfinance.com
Targets
-
-
Target
PO-AM2307586.doc
-
Size
982KB
-
MD5
58bbfc3f4971c44d3efb60e97299a5a5
-
SHA1
a487e3cbcc857afa70a3549c7820a4c75acb5c92
-
SHA256
ad4a9f03995ef8fa50027c10e69e9e8a814f21e89f1019f482ba8b859e079c68
-
SHA512
232558acd8cfc82304cedfedea8c55d73238e5d2f26fe84a45a203329b237670b344e73f89a3d74fee80ba4fe7da7dfd7f3e6597fb5449c23f99eb31d413c1ef
-
SSDEEP
24576:DbA0kMPWGK1nu6J2j7Sjxyei09Z/HhUGy16YzXoa+OyE+Dj1W6m+sykIsPAqnpus:p
-
Formbook payload
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-