General
-
Target
8aed421adbff85ab74e502c4fe7a8f3d338642e1fc1e7f3f13ce501d6c2cfcde.rar
-
Size
828KB
-
Sample
241107-pygrlasdrd
-
MD5
bb3d86e6ea5747296eaf2771f33bc554
-
SHA1
efebb98f0a5e6c642fb2657a28682308afb6b755
-
SHA256
8aed421adbff85ab74e502c4fe7a8f3d338642e1fc1e7f3f13ce501d6c2cfcde
-
SHA512
adbcc9f0ad954ff9e9ce050d944233f1669e9f9e30c49f68c7c7ea647c4d1c45e672365efdfb53182ef28fd8e103fcb6f8055d23f3002559bee0ef198542c64b
-
SSDEEP
24576:1wgR7dY9czijH8yFyLLw+Kn+E+dk9ZM+kj5m2:XPYyz0H8yF8E+KT+dEhSm2
Static task
static1
Behavioral task
behavioral1
Sample
Kópia Žiadosti o platbu faktúry 0010 (2).xlsx.exe
Resource
win7-20240903-en
Malware Config
Extracted
formbook
4.1
ud04
oum7.pro
ovonordisk.online
akrzus.pro
tendmtedcpsa.site
mm.foo
animevyhgsft29817.click
digdxxb.info
1130.vip
uy-now-pay-later-74776.bond
ybzert.online
edcn.link
rime-flow-bay.xyz
nd777id.beauty
otoyama.shop
lranchomx.xyz
unluoren.top
uglesang-troms.net
udulbet88.net
raquewear.shop
ijanarko.net
iuxy.host
itaxia.dev
hisewntbqg.makeup
talianfood.store
22gxx.app
tandkite.fun
rovideoeditor.shop
ires-86307.bond
elitjatarjoukset.click
rofilern.net
uycarpaylater-02-t1e-01.today
futurum.xyz
inance15.site
alance-ton-budget.net
tpuniplay.shop
dlpli.xyz
riteon.online
rippyshaker.shop
rn10.top
linko1win.icu
ugeniolopez.art
raphic-design-degree-68380.bond
narchists.info
uy-now-pay-later-25573.bond
gzvmt.info
df.clinic
onesome.store
imba-168.net
ayef.xyz
64axyozkgl.top
dult-diapers-53774.bond
ec.baby
el-radu-easy4y.one
asik-eye-surgery-63293.bond
p-inbox4.click
0417.one
ualitystore.shop
partments-for-rent-61932.bond
enobscotlobster.online
fhou.link
eo56a3oouu.top
cweb.cyou
hoe-organizer-za.today
p806.top
2creativedesign.online
Targets
-
-
Target
Kópia Žiadosti o platbu faktúry 0010 (2).xlsx.exe
-
Size
1.4MB
-
MD5
6de30093ba5663d3446d5fa60d4b229c
-
SHA1
6a2c90171b273c0123aba4a8a0a89506ae05c2bb
-
SHA256
e790e710f5020d3450504e9dd7001c5279ef5d9b01dd133783542ad184771517
-
SHA512
342c678c3b335b0e4ece024195a555fc4e570d7d50f367af331ab76ef913584460239e25825170db670ad116319eb6852c93014ed5efb643e05ce7c40ca4f6da
-
SSDEEP
24576:TqDEvCTbMWu7rQYlBQcBiT6rprG8amfdOEsqRONlanXbINp:TTvC/MTQYxsWR7amfvROan
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-