General
- Target Purchase List .exe
- Size 79KB
- Sample240619-16w22aydqm
- SHA256 6f61a8c2f7e89c87050811f34877179ed753ea5344115e7b059da05c3f1f2b79
- MD5 3462a1a8071d37ce9110eaea3b9cdf50
- SHA1 ccd57efa4c7330c0d351b62a362f8b7b06e35c92
- SHA512 4bc0636b997f78d461be2f9124e1ef83b0ea20e5af7d49b4c6aaf5fe87629aac78064c96007e4d6a8ffd288ba21c967780da365bb301d965278bcd7714272ba3
- SSDEEP 1536:3YTth9Ag7qBLMeHdLfK6IVoi+pQNafOC3BSmDi:3YD7qFHTIMQQmmO
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
Purchase List .exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Purchase List .exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
-
formbook
-
4.1
-
45er
-
depotpulsa.com
-
k2bilbao.online
-
bb4uoficial.com
-
rwc666.club
-
us-pservice.cyou
-
tricegottreats.com
-
zsystems.pro
-
qudouyin6.com
-
sfumaturedamore.net
-
pcetyy.icu
-
notbokin.online
-
beqprod.tech
-
flipbuilding.com
-
errormitigationzoo.com
-
zj5u603.xyz
-
jezzatravel.com
-
zmdniavysyi.shop
-
quinnsteele.com
-
522334.com
-
outdoorshopping.net
-
7140k.vip
-
appmonster.live
-
rvrentalsusane.com
-
berry-hut.com
-
h-m-32.com
-
aklnk.xyz
-
project.fail
-
thelbacollection.com
-
ternkm.com
-
331022.xyz
-
qhr86.com
-
casvivip.com
-
f661dsa-dsf564a.biz
-
holisticfox.com
-
taobaoo03.com
-
kursy-parikmaher.store
-
reignscents.com
-
wot4x4.com
-
axoloterosa.com
-
instzn.site
-
nn477.xyz
-
jwsalestx.com
-
cualuoinuhoang.com
-
sagehrsuiteindercloud.solutions
-
2ecxab.vip
-
lottery99nft.xyz
-
budakbetingbet43.click
-
plaay.live
-
drmediapulsehub.com
-
bahismax.com
-
clareleeuwinclark.com
-
clarimix.com
-
ssongg11913.cfd
-
shapoorji-kingstown.com
-
detoxifysupplements.info
-
easy100ksidegig.com
-
abramovatata.online
-
barillonfo.net
-
keendeed.com
-
yunosave.online
-
pptv05.xyz
-
malianbeini.net
-
polariscicuit.com
-
sahibindencomparamguvend.link
-
used-cars-99583.bond
Targets
-
- Target Purchase List .exe
- Size 79KB
- SHA256 6f61a8c2f7e89c87050811f34877179ed753ea5344115e7b059da05c3f1f2b79
- MD5 3462a1a8071d37ce9110eaea3b9cdf50
- SHA1 ccd57efa4c7330c0d351b62a362f8b7b06e35c92
- SHA512 4bc0636b997f78d461be2f9124e1ef83b0ea20e5af7d49b4c6aaf5fe87629aac78064c96007e4d6a8ffd288ba21c967780da365bb301d965278bcd7714272ba3
- SSDEEP 1536:3YTth9Ag7qBLMeHdLfK6IVoi+pQNafOC3BSmDi:3YD7qFHTIMQQmmO
- MD5 SHA1 SHA512 SSDEEP
-
Formbook payload
-
Deletes itself
-
Suspicious use of SetThreadContext