General
-
Target
cc295ae3f8d52b74a742364b9ba12acb
-
Size
322KB
-
Sample
240315-xhxrwagb9w
-
MD5
cc295ae3f8d52b74a742364b9ba12acb
-
SHA1
a752516d7f08208ba9560373a56e5b918fa0846a
-
SHA256
efd668c69a879c85b8fb4ffdae21c471ce300548ab17321b851d0089c7dfdf73
-
SHA512
f33a52a3945162ae02ed0081ef27f471bdd13593e34039f29ba8ee5ca9963ffa879639b867dbaaaf99f68baf59a00019605e360da74c3dc2673378cc1f2d6823
-
SSDEEP
6144:InHWk7SqZYslIEVta+G9oS6OZJJo734RrfAlI8IS4igM5xaMNvW+Yc8vqXUL:IHWk7SzEVtfG9EOLJOIRdnfixxaM1W/n
Static task
static1
Behavioral task
behavioral1
Sample
cc295ae3f8d52b74a742364b9ba12acb.exe
Resource
win7-20240221-en
Malware Config
Extracted
formbook
4.1
mn9v
whitepqags.com
jyps95.com
lkportoes.com
discotwinks.com
samgyupontheway.info
fourtimeseight.com
fossahosting.net
siakadvm.com
mywebpromotion.com
vysocky.coffee
folkloren.com
underwier.agency
moneymatric.com
romaditalialr.com
unfilteredessence.com
viktorlevi.com
curbo.info
sacrilege.church
charlenemee.com
magatv.net
yoonye.com
adriandd.com
ssampark.com
theholisticskincarecompany.com
lolnails.com
urbancare.site
thespaceraft.com
faslikeyf.com
radiate2020.com
glendevon.services
gsplao.com
power-realestate.com
side.run
ramseysmattresses.com
saltandsandhairco.com
labarradejuan.com
cejngj.com
ctkweb.com
testnewsecshhat.com
soveggiesogood.com
effortlesswarranty.com
ruintrumprally.com
modeconsultingllc.com
heathen6.com
mirail-inc.com
boatrentalcenter.com
shopseandco.com
valengz.com
citestbiz1597753661.com
getthereaviation.com
steelvalleyburners.com
trungtamxuongkhop.asia
tahmu.com
huhulook.com
wusatai.space
berlin-ferien.com
mentor-onlinemu.com
misspamper.life
condition1group.net
tgyybg.com
hypnofitlife.com
allamericanboots.com
rockerzee.com
cremeriakarol.com
lt1699.com
Targets
-
-
Target
cc295ae3f8d52b74a742364b9ba12acb
-
Size
322KB
-
MD5
cc295ae3f8d52b74a742364b9ba12acb
-
SHA1
a752516d7f08208ba9560373a56e5b918fa0846a
-
SHA256
efd668c69a879c85b8fb4ffdae21c471ce300548ab17321b851d0089c7dfdf73
-
SHA512
f33a52a3945162ae02ed0081ef27f471bdd13593e34039f29ba8ee5ca9963ffa879639b867dbaaaf99f68baf59a00019605e360da74c3dc2673378cc1f2d6823
-
SSDEEP
6144:InHWk7SqZYslIEVta+G9oS6OZJJo734RrfAlI8IS4igM5xaMNvW+Yc8vqXUL:IHWk7SzEVtfG9EOLJOIRdnfixxaM1W/n
-
Formbook payload
-
Suspicious use of SetThreadContext
-