General
-
Target
Etisalat Summary Bill for the Month of May.exe
-
Size
1.0MB
-
Sample
240603-st3eaabh94
-
MD5
6eb32cf2b1d4a3b38ef372e6c1d76b04
-
SHA1
d72628520b0978a1b1be32f975676858c3d3476c
-
SHA256
bcc5a9772d5c0d2a0db971eff31f5a0e6feccdd6cb8defccbea6f00b5967cf38
-
SHA512
7e655a1ff81c24052a877ebd116e159a0c1bc79bb05e5b6823ba83c6c269a1a970a98babecd226fe8ffcc16d8bce8da1a56f6730153a695eed5e6b785c5eb4d3
-
SSDEEP
24576:wAHnh+eWsN3skA4RV1Hom2KXMmHa2XbblkxUHjtcyd5:nh+ZkldoPK8Ya2XbblkCHjtc8
Static task
static1
Behavioral task
behavioral1
Sample
Etisalat Summary Bill for the Month of May.exe
Resource
win7-20240221-en
Malware Config
Extracted
formbook
4.1
ss63
catpig.xyz
chatladyanzensei7.site
onewayonepaydroptaxi.com
bima188.lol
wealth-km.online
seepao27200.top
6c958u9.lol
fbyu57ytsd.shop
baranetentegre.com
webaichimie.com
h3k38q2.lol
abicomsrl.com
338kp.vip
rescuecube.com
bubatz-t.com
psgluxuryapartments.com
goodfellowlawfirm.com
bais141.com
imingchu.com
ekzeanjfolzaks.top
hanweixn.com
getwalkapp.com
pharm-resources.com
montessorigpt.com
novaprivatecare.com
3656444.com
h61u4oxx4sraqjm.buzz
vak888.life
q43n.top
sushiommen.com
wvinsiders.com
emran-tahhan.com
manipulatedalgorithms.com
presentiei.shop
juntospelors.com
j0a6doy1x8eyx.com
yexoiup.xyz
bricoarq.com
hnxymaritime.com
selllocaljet.com
h5left513.xyz
65yty.com
everymgs01.com
barbaraht.com
mx5cucs.xyz
checkscamsv.com
smpn1madangsuku2.store
mixefy.shop
gacordewa288.life
srisaiprintpack.com
gasdepo168.com
etancheite-ajaccio.com
slow-man.com
thewhitehorsepub.biz
bay6studio.com
djhtshrtshgrg.lol
xcxocez.shop
games.broker
nudkiss.com
ccconnectglobal.com
wifmilio.com
dpuntada.com
ads8562.shop
diferenciaes.com
fashionchc.com
Targets
-
-
Target
Etisalat Summary Bill for the Month of May.exe
-
Size
1.0MB
-
MD5
6eb32cf2b1d4a3b38ef372e6c1d76b04
-
SHA1
d72628520b0978a1b1be32f975676858c3d3476c
-
SHA256
bcc5a9772d5c0d2a0db971eff31f5a0e6feccdd6cb8defccbea6f00b5967cf38
-
SHA512
7e655a1ff81c24052a877ebd116e159a0c1bc79bb05e5b6823ba83c6c269a1a970a98babecd226fe8ffcc16d8bce8da1a56f6730153a695eed5e6b785c5eb4d3
-
SSDEEP
24576:wAHnh+eWsN3skA4RV1Hom2KXMmHa2XbblkxUHjtcyd5:nh+ZkldoPK8Ya2XbblkCHjtc8
-
Formbook payload
-
Suspicious use of SetThreadContext
-