General
- Target PreAdvseReportCMS2601517348178.exe
- Size 1.0MB
- Sample260131-fbxd4ahw2e
- SHA256 b0fa29feb4da48f088d9e383d10ad8aef023efa91f6501142bb1f20749fd23d2
- MD5 2ffe73c83a6895e79bd1501d305e8f0d
- SHA1 aded87d14abdfd7d05003fa448b41a50de706bb6
- SHA512 37a5fd555054ae44f2ac747b30db0f75c8efa6f76d4985f58968ded22579890cc06c337769485cd17282f0a609bdab2c6b51376cad075e1729dbb4a9443f2b7c
- SSDEEP 24576:2o7CHHaZ81b/xCgr8k2sFOM94HUL+eIj2oGC+znvth:2bHaZ81b/xClXsFEHupOXGx7t
- TLSH T1C625118527B8DB16C5794BF85972E0706B34BC6CEA02E20A5FC66DDFB43AF445980B43
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PreAdvseReportCMS2601517348178.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target PreAdvseReportCMS2601517348178.exe
- Size 1.0MB
- SHA256 b0fa29feb4da48f088d9e383d10ad8aef023efa91f6501142bb1f20749fd23d2
- MD5 2ffe73c83a6895e79bd1501d305e8f0d
- SHA1 aded87d14abdfd7d05003fa448b41a50de706bb6
- SHA512 37a5fd555054ae44f2ac747b30db0f75c8efa6f76d4985f58968ded22579890cc06c337769485cd17282f0a609bdab2c6b51376cad075e1729dbb4a9443f2b7c
- SSDEEP 24576:2o7CHHaZ81b/xCgr8k2sFOM94HUL+eIj2oGC+znvth:2bHaZ81b/xClXsFEHupOXGx7t
- TLSH T1C625118527B8DB16C5794BF85972E0706B34BC6CEA02E20A5FC66DDFB43AF445980B43
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext