General
-
Target
Befehl.pdf.exe
-
Size
397KB
-
Sample
240819-jcdj6avcnj
-
MD5
134e7cb7484eabfbab70b96763bf9051
-
SHA1
d4c7881c41908a28908a32e46ab01e0f82afcbe4
-
SHA256
1259432f41bd872ef92450755035a516b40fcae624473c3dbd64efe7d89987b1
-
SHA512
059ad8b692b8a7b7a92e222bc82caf8b304063a924c75367d42477222185b98f6b31613db1699439a0a9b6b0b7de0ae0c56fea97bc3ec9c039f146b517cfa214
-
SSDEEP
6144:j1FxhzvZ74J5spMIUYYKUeq7a/WUuufzttMOtQb5:j7v54Jq1B6L7UuuLbM9b5
Static task
static1
Behavioral task
behavioral1
Sample
Befehl.pdf.exe
Resource
win7-20240708-en
Malware Config
Extracted
formbook
4.1
rn10
kedai168et.com
mental-olympics.com
pussybuildsstrongbones.net
857691.shop
hisellers.net
exposurecophotography.com
beaded-boutique.net
wednesdayholdings.com
plesacv.xyz
manonlineros.com
a0204.shop
333689g.com
dyprl716h.xyz
pulseirabet.com
fnet.work
bo-2024-001-v1-d1.xyz
ongaurdsecurity.com
giulianacristini.com
miladamani.com
magicalrealmshopkeeper.online
dy62i.com
pfjxhzz.com
yieks.voto
wallseason.com
kclsec.xyz
findwineinspace.com
everydayoptics.com
pg15.top
schody.net
82647351.com
fluteindia.com
infominer.club
kedai168el.com
compuglobalhypermeganet.app
designs-by-syn.com
godmachines.net
play-fortuna-ahf.buzz
lyjxk.com
waysfundraising.online
topuptalkmore.com
jingalraid.cfd
stonebahis411.com
adonicfuran.xyz
5z1lcnbm.fun
ignitorite.com
375bey.xyz
oloutlets.com
jn66-com-opqrst99988.com
xins.live
buchstabieralphabet.info
sfazzino.com
facai86.xyz
rapidsignsystems.com
golightresins.com
fpsportsmedia.com
superpawbulous.com
qsigoqav.xyz
anshtiwari314.online
flood-risk.net
voegbedrijf-offerte.com
onliinnforrmmosa.com
duangendget.store
georgiausssa.xyz
boldmusicmgt.com
teamhore724.buzz
Targets
-
-
Target
Befehl.pdf.exe
-
Size
397KB
-
MD5
134e7cb7484eabfbab70b96763bf9051
-
SHA1
d4c7881c41908a28908a32e46ab01e0f82afcbe4
-
SHA256
1259432f41bd872ef92450755035a516b40fcae624473c3dbd64efe7d89987b1
-
SHA512
059ad8b692b8a7b7a92e222bc82caf8b304063a924c75367d42477222185b98f6b31613db1699439a0a9b6b0b7de0ae0c56fea97bc3ec9c039f146b517cfa214
-
SSDEEP
6144:j1FxhzvZ74J5spMIUYYKUeq7a/WUuufzttMOtQb5:j7v54Jq1B6L7UuuLbM9b5
-
Formbook payload
-
Suspicious use of SetThreadContext
-