General
-
Target
21092024_0117_20092024_e-Invoice.zip
-
Size
806KB
-
Sample
240921-bnw7msybra
-
MD5
9044dd2fd0a6329abb0ff8176759aedc
-
SHA1
f7158b29927d6557e5c3758031d35c9e7124d1cc
-
SHA256
03269bda6be4990239d665ef46687005678b5d7cb217b7a65219d7927cc78420
-
SHA512
09253f99077b212be0fef7c9e333dd3340f24aaa96084b750e11efcdc50bf27f779fc5b42e05856b4464db4cb40030afca8e699294dbaf44b6d5207ea869f086
-
SSDEEP
24576:TzaqtRE5KkvYGknBJ8wjqJ1lly3KKwkxg4:fDWKkwGIwwS4ZwkJ
Static task
static1
Behavioral task
behavioral1
Sample
e-Invoice.exe
Resource
win7-20240903-en
Malware Config
Extracted
formbook
4.1
c89p
ftersaleb.top
dcustomdesgins.net
ostbet2024.live
rhgtrdjdjytkyhretrdjfytd.buzz
atauniversity.tech
idoctor365.net
x-design-courses-29670.bond
ellowold-pc.top
ransportationmmsytpro.top
areerfest.xyz
artiresbah-in.today
ijie.pro
torehousestudio.info
69-11-luxury-watches.shop
earing-tests-44243.bond
hits.shop
hzl9.bond
lood-test-jp-1.bond
livialiving.online
usymomsmakingmoney.online
olar-systems-panels-61747.bond
hinawinner.top
oldensky10.xyz
oginsuperking777.click
oviepicker.net
partment-rental05.online
ldkp.net
sofaerb.shop
ydh5.beauty
aston-saaaa.buzz
acuum-cleaner-84018.bond
usiness-printer-37559.bond
dindadisini12.click
j7zd12m.xyz
plesacv.xyz
trustcapital247.online
asapembuatanpatung.online
ent-all.xyz
r64mh1.vip
aser-cap-hair-growth.today
amattva.company
herightfits.top
uickautoquote.net
ctu36ojboz6w2cl.asia
oursmile.vip
astysavor.website
iam-saaab.buzz
igmoto.info
itchellcohen.net
un-sea.fun
steticavonixx.shop
arklife.shop
bsboffchatrussummsa.online
iuxing.asia
okenexchange.art
llhealthreview.online
refabricated-homes-53685.bond
atercraze.net
osmits.net
rail.cruises
utanginamo.sbs
hapanda.fun
arehouse-inventory-29693.bond
innivip.bio
aycare-service-99683.bond
Targets
-
-
Target
e-Invoice.exe
-
Size
1.1MB
-
MD5
9cff570bbd99193ba8618ba6c5491a13
-
SHA1
3848185fe5c08b05b27fbfa65cfadbf3096e908d
-
SHA256
ede8ae39d91066365f959fc9c98f0b47add88604ce95829a9618a15274faef3f
-
SHA512
191376aa71d6119d270a13692e8eadd06a492bc6777313fcc7bc27ebdc3244e902703bd8b206c3bfddf353131e1c2c9b7014e346649d1eb691d426d13764b34b
-
SSDEEP
24576:uRmJkcoQricOIQxiZY1iaC+BJ8a3qVH/by3Q4w0jgo:7JZoQrbTFZY1iaC+wakmnw0X
-
Formbook payload
-
Suspicious use of SetThreadContext
-