General
-
Target
fe520e524da362765f10d5c14321965cacecc43bb8b182368f0fdc4fbff140de
-
Size
667KB
-
Sample
241202-p4w4gatqby
-
MD5
32efec72a448a5e965b79f68d161c0e1
-
SHA1
a1e0804d12f993f34c6f720625b38d10eb7fb7db
-
SHA256
fe520e524da362765f10d5c14321965cacecc43bb8b182368f0fdc4fbff140de
-
SHA512
d6fd7bc0eae147c722fae935184e01e69dd802e1ff549d6eeb0d795e928e5e38f1c32c137527740793a1b175631c3d3cc699d1d6e7c4064a9be3e2e52e7ae795
-
SSDEEP
12288:IbTzYxUHyHNe67DZoMq05LFe7I+ov4Jq1F6EW42DrcpH:4gxQ6k6XZu05+IFQ06EHrpH
Static task
static1
Behavioral task
behavioral1
Sample
SOA SWIFT HLCUDX3241041211.pdf.exe
Resource
win7-20241010-en
Malware Config
Extracted
formbook
4.1
at22
etween-us.online
sphaleia.net
ental-implants-78350.bond
q4a.lat
commerce-97292.bond
linds-curtains-38811.bond
gyptevoyages.net
landofigueroa-abogados.net
cuitis.xyz
hantom.city
yzk.online
afikabmedan.store
ome-remodeling-67289.bond
ebpage-klzdxrhnazi.shop
eject.lol
rismart.xyz
nfluencer-marketing-72407.bond
ksolotl.xyz
ebsbayrntilrmizin93.xyz
pps-75399.bond
larecompany.sbs
b-apps.net
onitoring-devices-50256.bond
asusuos.shop
87zy448d.shop
irportandart.net
15y.lat
fujo3jsj8.cyou
uyhaa.website
uihangditrungquoc.online
sphalt-jobs-32044.bond
hlexpress-add.cyou
essecurity.xyz
assysirens.store
hhomestore.online
arehouse-inventory-86457.bond
ezup.store
ymgjyj.info
cez.lat
ubconcern.shop
ct1portfolio.xyz
fficecleaning216.shop
arbontrust.xyz
simg.xyz
oya.fun
irwickstore.store
s-yatch-rentals-9n.today
1854.loan
ontent-marketing-31220.bond
atreal.kitchen
lucorecover.net
nline-mba-85097.bond
heusefulshopun.shop
etvigosurge.shop
otwire.store
ysportsbook.xyz
teelsections.net
zgrfi.info
xosoft.xyz
epression-test-67062.bond
soiuy.xyz
fx8l3vz2c.icu
exer.xyz
95zt370d.shop
olajosbetku.store
Targets
-
-
Target
SOA SWIFT HLCUDX3241041211.pdf.exe
-
Size
1.1MB
-
MD5
2b608c57d5501c123485c89eff7bbe4f
-
SHA1
600e8019976ef12f51e79243a1eb99cd3af04620
-
SHA256
76ff0dffd9ed6c45ac635bfb3aad12d48cb3d2f0ae6473ebd036e450037bf00a
-
SHA512
a2f3cb3d7cae424ffee7646bf4b5fd1992d4c7f631aa82965d780f764610b0d6803884666224e36f4c10d82b75c0c463bba75c863e18b4df1202c71173315edb
-
SSDEEP
24576:Uu6J33O0c+JY5UZ+XC0kGso6FagJE2ed9niWY:uu0c++OCvkGs9FagBALY
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-