General
-
Target
JPG-68376878978-SSG TENDER REQUEST.JPG.exe
-
Size
592KB
-
Sample
231024-gs6vjaba5z
-
MD5
64df2da0575e7029bdadc77391850550
-
SHA1
b634fafdaa6e58f240b255a950ac1c049cbcbaba
-
SHA256
24e10f5915004000ec4bedf2c9f7a86dabb0480391b75b97af0c16c6151685b8
-
SHA512
4743239362b8e27e1509d1aa53dc88ebd45ffcc5545d76693cd7aa89fd7b9fb99cf16485d77a8151694256f2f30568978ab2a1a93ad68ee1e09d9d0abf067047
-
SSDEEP
12288:8zfqBuPR96HVg++4PjhPTYrV0FVhtywooD8vJoAOP3z8iz2CX+:8T6Io/jJTM0HywvDGsPD8n
Static task
static1
Behavioral task
behavioral1
Sample
JPG-68376878978-SSG TENDER REQUEST.JPG.exe
Resource
win7-20231023-en
Malware Config
Extracted
formbook
4.1
ifrg
68czt.com
gvosmm.com
stakehs.fun
constructionloancalculator.net
arissahotel.com
mndhhy.store
961bets.com
legendsturf.com
hbcucuratefoundation.com
vespeciative.com
zysport.net
terravortex.cfd
tasteitmakeit.com
muversus.pro
kqguvq.cfd
despachomorelia.com
66tv982.xyz
wineroomcontractor.com
boat-insurance-today.world
sygree.net
cigarettesonlinestore.net
wholesomeroyal.com
nimbuscleaners.online
skatingisamazing.com
58457952.com
scnanhong.net
bitcock.net
bezobotnation.net
onesixthpress.com
bellasofisticada.com
alivenode.com
qagkqjps.asia
pokerhebatt7.com
bindalmegaprojects.com
ecolecsm.com
yljinjia.com
75241.shop
nitenitedidthis.com
zaesstudios.com
dewdrop.store
thegolfstore.net
acs-gabon.com
8651k.vip
hzchenzhang.com
ockqen.cfd
copperstatenods.com
healthsout.net
lennard.codes
695d.xyz
theavenuclinic.com
thzrcd.site
oliverstamatatos.com
imroahan.dev
ruffibuddy.xyz
metashop-02.online
h0kj.lat
gdminsheng.icu
zaphub.app
trust-official-2.com
ecodfairs.top
a88d.xyz
badaksegar01.click
creams-72542.bond
a4ilh1.cfd
transporteturisticofradan.space
Targets
-
-
Target
JPG-68376878978-SSG TENDER REQUEST.JPG.exe
-
Size
592KB
-
MD5
64df2da0575e7029bdadc77391850550
-
SHA1
b634fafdaa6e58f240b255a950ac1c049cbcbaba
-
SHA256
24e10f5915004000ec4bedf2c9f7a86dabb0480391b75b97af0c16c6151685b8
-
SHA512
4743239362b8e27e1509d1aa53dc88ebd45ffcc5545d76693cd7aa89fd7b9fb99cf16485d77a8151694256f2f30568978ab2a1a93ad68ee1e09d9d0abf067047
-
SSDEEP
12288:8zfqBuPR96HVg++4PjhPTYrV0FVhtywooD8vJoAOP3z8iz2CX+:8T6Io/jJTM0HywvDGsPD8n
-
Formbook payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Suspicious use of SetThreadContext
-