General
-
Target
Document.exe
-
Size
1.0MB
-
Sample
241028-qmh1ysxrev
-
MD5
8128f92e759ef0399a73d001b78bf37e
-
SHA1
64d435e7ca1c98ea6e1b5818d6cc8d0dad22db7d
-
SHA256
2d1d21fefaccdde89b759234f18ed79ea0a8a631c15be4f93fe3106f7fe6abe6
-
SHA512
5de12e936fc0be70ed771cb911e3cacec64a1ddd6e84124bd59b9a56117fd5eae655c79442cc33f971fe686ec8826484c196f04c5c6b85fb6864ac7b24faee30
-
SSDEEP
24576:ffmMv6Ckr7Mny5QL2OTYtNaqimUy7RRtst35de:f3v+7/5QL2mTARReR5de
Static task
static1
Behavioral task
behavioral1
Sample
Document.exe
Resource
win7-20240903-en
Malware Config
Extracted
formbook
4.1
n04s
imberstimedtinter.cfd
ttfr44solutionschesapeake.pro
kkas.xyz
sk-frby.xyz
ptowing.net
jzimq-community.xyz
ressoncrookencruller.cfd
amedana.click
ravamarketing.tech
udfa-speech.xyz
ose-bdbzsg.xyz
alsiuuarsiau.xyz
fgiopa.xyz
15501.pro
tart-ewlon.xyz
kjjf-company.xyz
araldschauer.shop
wet25.vip
armostfavorgaivn.cfd
ompa77.click
oldier-nkosi.xyz
ouchs.xyz
eovk-how.xyz
pirutznekg.top
oeda-ssa.xyz
airobi77.cfd
oldplay.click
tzai-space.xyz
ateslotular.xyz
okavuxentid.xyz
53924.pink
trrttfjftw.top
ofdkd-determine.xyz
tudy-hwcd.xyz
apavalley.directory
gnbft-top.xyz
rislyhallyhanced.cfd
ostcanadantyg.top
nowmass.top
ccspt.net
j4yt2.vip
2bmarketingwebinarshub.today
endkos.family
espond-yvctq.xyz
odnotaba.website
3526592.xyz
ist-sxyu.xyz
eat-tyfp.xyz
ndividual-liqkc.xyz
om-trackeg.top
fogatoshadufsshimkus.cfd
etinfin8y.click
reeremovebg.top
5388205.top
nterest-phvfi.xyz
rodutos-corporais.today
cteruvyyn.xyz
ember-kwmapz.xyz
xggc-others.xyz
fyigh-on.xyz
c578.top
adtv-wfj.xyz
afin10.shop
ecbsb.team
280.vip
Targets
-
-
Target
Document.exe
-
Size
1.0MB
-
MD5
8128f92e759ef0399a73d001b78bf37e
-
SHA1
64d435e7ca1c98ea6e1b5818d6cc8d0dad22db7d
-
SHA256
2d1d21fefaccdde89b759234f18ed79ea0a8a631c15be4f93fe3106f7fe6abe6
-
SHA512
5de12e936fc0be70ed771cb911e3cacec64a1ddd6e84124bd59b9a56117fd5eae655c79442cc33f971fe686ec8826484c196f04c5c6b85fb6864ac7b24faee30
-
SSDEEP
24576:ffmMv6Ckr7Mny5QL2OTYtNaqimUy7RRtst35de:f3v+7/5QL2mTARReR5de
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-