Behavioral task
behavioral1
Sample
2732-24-0x0000000000400000-0x000000000042F000-memory.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2732-24-0x0000000000400000-0x000000000042F000-memory.exe
Resource
win10v2004-20240419-en
General
-
Target
2732-24-0x0000000000400000-0x000000000042F000-memory.dmp
-
Size
188KB
-
MD5
e676e623588fb3f8f7f4bb0b794472c7
-
SHA1
28c3acd9d3cd9329603129235aa34bfaf8b329e5
-
SHA256
65c0ec701dec3b80b88910825c25feb4810c10bcdc9996d925b5f9248adb4770
-
SHA512
3674cb27f81fd30b8af6590bdbaee76adc99b0b8badc237796ef1723aac8c7f87370411a4c392be3a3859ceb2cc47b345658fea1feb4530303a08ed143ccc113
-
SSDEEP
3072:YiSZ6kfjQGWTwQC3adh91U6TF4iwJ/LWhfZET6yo+V25/:AjQf0a3jU6TF4ZJC5+M
Malware Config
Extracted
formbook
4.1
hd05
businessjp6-51399.info
countyyoungpest.com
taxilasamericas.com
stairs.parts
nrgsolutions.us
cbdgirl.guru
dropshunter.net
adorabubble.co.za
alcohomeexteriors.com
aquariusbusiness.info
zaginione.com
pintoresmajadahonda.com
fursace.club
musiletras.co
carpoboutiquehotel.com
redacted.investments
symplywell.me
lezxop.xyz
stmbbill.com
1509068.cc
savdesign.online
gaiacoreresearch.com
pivoluvva-usa.com
kathrynmirabella.com
ziplnk.xyz
furanoikedanouen.com
regenesisvista.world
lorenzodavissr.com
friendlyemporium.com
7727.info
moledistillery.com
geturpdtaemza.com
sparkfirestarter.net
q3hjns.shop
thingsidonaked.com
attack.info
salihkaradag.com
vn6b6q.com
thierrydoublein.com
buddhasiddhartha.com
uniqueofferss.com
trexendofparadise.club
evans-gdaddy-test-domain.online
kgroundx.com
2us7o.us
damtherncooling.com
kakashi-hatake.shop
blogonrunning.com
lovepox.com
ramediatech.online
satwaspin.net
greenink.store
tuskerlogix.com
codyscalls.com
system.ngo
connect-talent.com
addck.top
teramilab.com
yuyuklmn123888yy.xyz
9orwr6.vip
nubeqa77.life
lmpalmour.com
sandeshkrantinews.in
find-buildings.com
vagabondtracks.com
Signatures
Files
-
2732-24-0x0000000000400000-0x000000000042F000-memory.dmp.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ