General
-
Target
Statement of Account COFCO Pte Ltd.exe
-
Size
826KB
-
Sample
241007-hx8elawfjh
-
MD5
7883efb071ce087ae6008664f3846f12
-
SHA1
4706e745be7810b755d36f388ba7708c888e2387
-
SHA256
f30297ce3c8bc97f49286ee0c14b241d6653a2e992de11213aa25a296ab485cd
-
SHA512
24bd09fcd044020fe98082bb1764ea89b6a6f0ea7af9c763bd7e5c7b28723371249492b7458aed563044ce931e0a16633514633d61794d72e190897d940ae323
-
SSDEEP
12288:F08rs/LneegfJwDqt6mWV1IQYN59wtknFxEkHmFfo6lob5scglabT4NiBt:4K/O2WPIQY5GCvjHmFfT3Yb4iT
Static task
static1
Behavioral task
behavioral1
Sample
Statement of Account COFCO Pte Ltd.exe
Resource
win7-20240903-en
Malware Config
Extracted
formbook
4.1
cu29
qidr.shop
usinessaviationconsulting.net
68716329.xyz
nd-los.net
ealthironcladguarantee.shop
oftware-download-69354.bond
48372305.top
omeownershub.top
mall-chilli.top
ajakgoid.online
ire-changer-53482.bond
rugsrx.shop
oyang123.info
azino-forum-pro.online
817715.rest
layman.vip
eb777.club
ovatonica.net
urgaslotvip.website
inn-paaaa.buzz
reativedreams.design
upremehomes.shop
ames-saaab.buzz
phonelock.xyz
ideandseekvacations.xyz
77179ksuhr.top
ental-bridges-87553.bond
7win2.bet
ainan.company
5mwhs.top
hopp9.top
65fhgejd3.xyz
olandopaintingllc.online
n-wee.buzz
reshcasinoinfo2.top
5734.party
qtbyj.live
gil.lat
siabgc4d.online
fios.top
sed-cars-89003.bond
nlineschools-2507-001-sap.click
upiloffatemotors.online
ordf.top
achhonglan.shop
irex.info
oursmile.vip
leachlondonstore.online
asukacro.online
panish-classes-64045.bond
apita.top
srtio.xyz
kdsclci.bond
ochacha.sbs
oldsteps.buzz
yzq0n.top
npostl.xyz
ladder-cancer-symptoms-mine.sbs
400725iimfyuj120.top
3589.photo
rasilhojenoticias.online
ependableequipment.online
itusbandar126.info
ohns.app
f6b-crxy.top
Targets
-
-
Target
Statement of Account COFCO Pte Ltd.exe
-
Size
826KB
-
MD5
7883efb071ce087ae6008664f3846f12
-
SHA1
4706e745be7810b755d36f388ba7708c888e2387
-
SHA256
f30297ce3c8bc97f49286ee0c14b241d6653a2e992de11213aa25a296ab485cd
-
SHA512
24bd09fcd044020fe98082bb1764ea89b6a6f0ea7af9c763bd7e5c7b28723371249492b7458aed563044ce931e0a16633514633d61794d72e190897d940ae323
-
SSDEEP
12288:F08rs/LneegfJwDqt6mWV1IQYN59wtknFxEkHmFfo6lob5scglabT4NiBt:4K/O2WPIQY5GCvjHmFfT3Yb4iT
-
Formbook payload
-
Deletes itself
-
Suspicious use of SetThreadContext
-