General
- Target Payment.exe
- Size 714KB
- Sample240706-akgr4ssdrd
- SHA256 2a899ee00e6f2b09c002a3dc271e3ec7d15a7c98b8a3d9500f96dfd7fe941f4a
- MD5 1eca8e2ba8d4939400ef3b6f315a68f2
- SHA1 6729aea498f4d5d67bd78776a309cd3c7c06e3cb
- SHA512 c826420eeaa3cb9726de4a20ff92b8d66b13b9edfd625e1955d9f5d44c86ba2987686789e99dc42c4f8ec734090259e9c7c4582fba05e7d8b02f6bd899718159
- SSDEEP 12288:mY5Qvy6uSajv6QAcFahFRavD7R5GMYG2ucItiyE:t5QvTuSar6QgjGqGV
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
Payment.exe
Resource
win7-20240508-en
Malware Config
Extracted
-
formbook
-
4.1
-
na10
-
tetheus.com
-
ventlikeyoumeanit.com
-
tintbliss.com
-
rinabet357.com
-
sapphireboutiqueusa.com
-
abc8bet6.com
-
xzcn3i7jb13cqei.buzz
-
pinktravelsnagpur.com
-
bt365038.com
-
rtpbossujang303.shop
-
osthirmaker.com
-
thelonelyteacup.com
-
rlc2019.com
-
couverture-charpente.com
-
productivagc.com
-
defendercarcare.com
-
abcentixdigital.com
-
petco.ltd
-
oypivh.top
-
micro.guru
-
hokivegasslots.club
-
5663876.com
-
symboleffekt.info
-
tworiverlabsintake.com
-
pegaso.store
-
sasoera.com
-
material.chat
-
taniamckirdy.com
-
dansistosproductions.com
-
moromorojp.com
-
z27e1thx976ez3u.buzz
-
skinrenue.com
-
nbvci.xyz
-
jakobniinja.xyz
-
snykee.com
-
sl24.top
-
wawturkiye.xyz
-
virtualeventsbyelaine.com
-
giorgiaclerico.com
-
d9psk8.xyz
-
hard-to-miss.space
-
awclog.com
-
topcomparativos.com
-
somoyboutique.com
-
findlove.pro
-
zbo170.app
-
dexcoenergy.com
-
nona23.lat
-
ingelset.com
-
hexatelier.com
-
nftees.tech
-
visionarymaterialsinstitute.com
-
khanyos.com
-
bz59.top
-
migraine-treatment-28778.bond
-
catboxbot.online
-
kkugames.com
-
llmsearchoptimization.com
-
fipbhvvb.xyz
-
vmytzptc.xyz
-
intermediafx.shop
-
lhrrs.com
-
grimreapervalley.com
-
discount-fess.space
-
liamcollinai.com
Targets
-
- Target Payment.exe
- Size 714KB
- SHA256 2a899ee00e6f2b09c002a3dc271e3ec7d15a7c98b8a3d9500f96dfd7fe941f4a
- MD5 1eca8e2ba8d4939400ef3b6f315a68f2
- SHA1 6729aea498f4d5d67bd78776a309cd3c7c06e3cb
- SHA512 c826420eeaa3cb9726de4a20ff92b8d66b13b9edfd625e1955d9f5d44c86ba2987686789e99dc42c4f8ec734090259e9c7c4582fba05e7d8b02f6bd899718159
- SSDEEP 12288:mY5Qvy6uSajv6QAcFahFRavD7R5GMYG2ucItiyE:t5QvTuSar6QgjGqGV
- MD5 SHA1 SHA512 SSDEEP
-
Formbook payload
-
Suspicious use of SetThreadContext