General
-
Target
808d60c29c337aea37014a94d88be5b7c297cd814c7c9ae322396d51ae1d97ce
-
Size
791KB
-
Sample
240925-e3n2csybke
-
MD5
97e7f214aaa62fb94c4d5858b3014ba8
-
SHA1
b7d74564160b24e2fa0d25c40113022684d9681a
-
SHA256
808d60c29c337aea37014a94d88be5b7c297cd814c7c9ae322396d51ae1d97ce
-
SHA512
b10d679b440ff1fe2fba2fd033052eeeeceaec8aefd397a3419681c547f80f825a2fe7cdbe6b296fb8dd58e9036d946a4697628e4e8107c70641719a1588b06c
-
SSDEEP
12288:PCzhcqteBxyBGUu5rXOLgKeB2YG9ea4DLnSx8Po7iGyaXkLwFKv+KhBsxgcy7zzA:qzaqtRE5KkvYsLSSwR8xhBDcNQs
Static task
static1
Behavioral task
behavioral1
Sample
TNT AWB TRACKING DETAIL.exe
Resource
win7-20240903-en
Malware Config
Extracted
formbook
4.1
jd21
bankownedproperties-0.bond
slab-leak-repair-74697.bond
tvtwenty20sr.top
scw-iot.net
circusenergy.online
030002787.xyz
propertiesforrentus11.bond
defi-banksystem.online
gkbet168.net
joycasino-ed46.top
sctttc-or.top
borghardt.xyz
therealtorpeddler.info
macexpress.online
bobbyharvey.store
dating-dd-de.info
thetrue.one
alqahtani.site
mahlubini.africa
truck-driver-jobs-42274.bond
packaging-services-17231.xyz
badcreditloans59.xyz
cellphonesfxw.today
applyzentavra.com
basscolofers.shop
knee-pain-treatment-140741.xyz
saltyfashion.shop
quantive.tech
cldvpn.sbs
bolehapasaja16.shop
nextdoor3.store
forklift-jobs-29768.bond
pools-99305.bond
3780.cyou
solveiterzsolutions.fun
key-ring.xyz
replyingendoplasmed.pro
infanbs.shop
apple0ficial-ld.info
stress-relief-44110.bond
r86gd377hi.rent
lww20.top
apartments-for-rent-series.sbs
emiratesnseic.top
senior-living-25596.bond
hostease.cloud
walk-in-tubs-30303.bond
childrenfirstcenter.xyz
45941978.top
pw7-golden-painting-ldm.lat
0yf.com
tyumk.xyz
utopartses.com
hearing-aids-77773.bond
frametoryframes.shop
mvtb.pics
speeddeals.online
cyber-eu.digital
hm23s.top
pools-80761.bond
2002w.app
authentication-app-69447.bond
legendhud.shop
xmld101.icu
weight-loss-003.today
Targets
-
-
Target
TNT AWB TRACKING DETAIL.exe
-
Size
1.1MB
-
MD5
18ada2e6acac1de1eb6c321d65d8f086
-
SHA1
a959c11687e53e59a63f69f0783d277a2b9441b9
-
SHA256
9de1654530e9c6e5e1d5054bc17d04c2aa08a35b8e1285d86c2cb34ec8b0f3a5
-
SHA512
d43cafe76054414f3b720611358915b4f2b4a76b4070a960b4f81510fae3fe01969302901aabbcef236056691c6d9eeefd04070d336650bc63232c60eb07726a
-
SSDEEP
24576:uRmJkcoQricOIQxiZY1iaCPhL+iw5AvhBDcjbW:7JZoQrbTFZY1iaC5LJ5tcW
-
Formbook payload
-
Suspicious use of SetThreadContext
-