Behavioral task
behavioral1
Sample
0b928b1c0ad0176766c88bf7bb7036cde5ce5bd1e948268c239d8230117a43e5.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
0b928b1c0ad0176766c88bf7bb7036cde5ce5bd1e948268c239d8230117a43e5.exe
Resource
win10v2004-20241007-en
General
-
Target
0b928b1c0ad0176766c88bf7bb7036cde5ce5bd1e948268c239d8230117a43e5
-
Size
164KB
-
MD5
63870670c7d49109522c575ab349e41f
-
SHA1
e4b7139b3cb72e21497bfd012f1534a912b65d49
-
SHA256
0b928b1c0ad0176766c88bf7bb7036cde5ce5bd1e948268c239d8230117a43e5
-
SHA512
bc5bfaa532ddf70d6e63b08bc2914a25501e0d4230dc256f001825291eb79b7b293a7aee293745e19aaf45ebb0f15baa4046d39cdba0e8e56317fd7e540d386d
-
SSDEEP
3072:cJSe2Q7/QvGUMHcK6yJfj9og19mrElVf5qDE+p6I3jIxp:h4O3MHlJJfj9ogzmKVf5EE+jzI
Malware Config
Extracted
xloader
2.5
3j0s
designingthenewyou.com
atatang.com
nathanrundle.com
compromissodeamor.com
htbyh.com
flymagna.club
freeflowinitiative.com
jonesof5group.com
matrix-casino.com
alanizremodeling.com
urvb.top
eleenfashion.com
y-mashiko.com
quirtic.com
givgive.online
ivermectin.care
tajemnice04.icu
lowridasindahoodtoyof2.xyz
guohongan.com
drshivanieyecare.com
roki-roki.com
cnctaikan.com
mdfiotrk.com
skintreasurescosmetic.com
victoryvodkaus.com
fdcs.online
pancakeswapfinaince.online
slishokmmnogo.space
sandacars.com
diyuan.art
avtb2461.com
burmanews.club
thewholedick.com
fptbinhduong247.com
nudistwedding.com
biotox-nutrition.net
envieramci.quest
theesg.xyz
umbrejugerhalos.com
6by7limited.com
pcdd168.com
larancibiag.com
wlrvr.com
willingtopayfor.com
merryutilityservices.net
8herzelstreet.com
irwinventures.com
teddytalkco.com
mrktflow360.com
veoks.com
ptadenbinuangkalsel.com
mysicilianadventure.com
azlabel.info
amenosu.com
redwineproductreviews.com
3iy.biz
frjrbfkfncifnsnqwnxbcbckf.com
destannakliye.com
herosfarm.net
beatanyoffers.com
micheo-music.xyz
bohumsee.com
stealthcarrier.com
firstclickparts.com
ms-outlookonline.biz
Signatures
Files
-
0b928b1c0ad0176766c88bf7bb7036cde5ce5bd1e948268c239d8230117a43e5.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ