General
-
Target
SecuriteInfo.com.Win32.CrypterX-gen.2899.32710.exe
-
Size
592KB
-
Sample
240909-lcgb6a1dll
-
MD5
a796e201c6de52790bf473c385efb84d
-
SHA1
5eea79136a8a337ab43a88d21e55f92b2db74718
-
SHA256
dc7ebbb50daeb8d518dc37a89775ffd1062b0b40014afa69ff2195370fb2f30d
-
SHA512
74a979c90fe4d650f89b379fdb18a7e8003d8bc6b22bf3d36de4b57a6d6c7488eb85b476243550d4360e22886741332c2462b99bdf50a00040a048094fd4d89a
-
SSDEEP
12288:S1xTx3j5DTx7EXuE331INsSB9HsP5A0cClmkDt1pDttlp9i72l:qHFkuK32ftW5A0cEm0ZFkE
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.CrypterX-gen.2899.32710.exe
Resource
win7-20240903-en
Malware Config
Extracted
formbook
4.1
b31a
enjamin-paaac.buzz
mail-marketing-40950.bond
pusems28-post.cyou
hindo.top
ruck-company-be.today
asinos-deutschland.net
ewancash.boats
etdopovo.casino
rcher-saaac.buzz
871166.vip
manuel.app
g3yqo.shop
-9way.xyz
qawgytfexe.bond
iefi6834.vip
ental-health-35901.bond
idat-merkez18.top
rojectleadzone.website
lirudolph.top
migloballlc.online
utebolshirts.shop
i-tools-57602.bond
itchen-889.bond
hewieandfriends.info
tlchurch.net
arolmodasgpuava.online
indjuvedermdoctorsnearby.today
auwin-daftar.xyz
arden-sheds-23886.bond
2239d3.christmas
irablog.xyz
remation-services-88863.bond
ehxk3u7.forum
resdai.xyz
61pk48ln.autos
-web-p102.buzz
eb2125.info
ole-xaaaa.buzz
lc-driving-school.net
igh-class-jewelry.info
66gd660du.bond
ixi.asia
aemoruhagic.click
entalcare-us2-borysfb.today
olf-cart-82894.bond
algrup.net
usanscanneritaly63.sbs
ames666.xyz
ockycanada.net
bykmr.shop
gpmedia.app
avada-ga-34.press
igraine-treatment-33058.bond
heodore-saaab.buzz
ashforhouse19.online
48827496.top
mazonun.top
lstrk.fun
hegdg.net
nssmodule.center
sksiniaja7.buzz
uneytozgur.online
orri.shop
ras-us-1.bond
awlc7038.vip
Targets
-
-
Target
SecuriteInfo.com.Win32.CrypterX-gen.2899.32710.exe
-
Size
592KB
-
MD5
a796e201c6de52790bf473c385efb84d
-
SHA1
5eea79136a8a337ab43a88d21e55f92b2db74718
-
SHA256
dc7ebbb50daeb8d518dc37a89775ffd1062b0b40014afa69ff2195370fb2f30d
-
SHA512
74a979c90fe4d650f89b379fdb18a7e8003d8bc6b22bf3d36de4b57a6d6c7488eb85b476243550d4360e22886741332c2462b99bdf50a00040a048094fd4d89a
-
SSDEEP
12288:S1xTx3j5DTx7EXuE331INsSB9HsP5A0cClmkDt1pDttlp9i72l:qHFkuK32ftW5A0cEm0ZFkE
-
Formbook payload
-
Suspicious use of SetThreadContext
-