General
- Target proforma invoice_pdf_____________________________.exe
- Size 1.0MB
- Sample210924-qwt5kshbc9
- SHA256 137bbdb0a6a00a9167dff5cb670ec17aab82ae50392e12b1cdb6a08110d75285
- MD5 69f7b7c9f79e33e0eed1381300fe305f
- SHA1 a54b8f492a5183e83744a68d9780fd4a1e846f4d
- SHA512 0a1c625caa22eaf915a4fca2daa374a6d72252dcb7daa2cc1bfdb71ff8ade61092150c46a106abb8e7049c0bae03cf54b89813fb2a60858eeba4fbee20fdb4a3
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
proforma invoice_pdf_____________________________.exe
Resource
win7-en-20210920
Malware Config
Extracted
-
formbook
-
4.1
-
ajki
-
http://www.midwestamericanwoman.com/ajki/
-
elborivegano.com
-
jacksbookbuddies.com
-
gentciu.com
-
lovetattoonorteguadalix.com
-
dahlkar.com
-
hjobjiihna.club
-
narccar.com
-
noexcuseadventure.com
-
mortongroverealestateinfo.com
-
pursuegoodtimes.com
-
becomearepresentativetoday.com
-
20bagger.com
-
lowestprices.space
-
qzgay.com
-
thegoenkapost.com
-
glassdooronline.com
-
quantizesoftware.com
-
bayleighmphotography.com
-
hzmm97.com
-
theexoticbox.com
-
verishop.site
-
meusyouunlimited.com
-
hvtnywveba.club
-
yffuture.com
-
bandsignsandgraphics.com
-
rhealending.com
-
studentlegalforms.com
-
fubonbank.xyz
-
themuslim101.com
-
gigwindow.com
-
thevillaflora.com
-
fontankarecords.com
-
liaofeng2008.com
-
emerging.global
-
rutasecretas.com
-
imtheonlyperson.global
-
bestforcrypto.com
-
adasnspa.com
-
abilityhomehealthservices.com
-
travelfever-reiseblog.com
-
redtail.football
-
teatrodomorcego.com
-
myfunkyshirt.com
-
volanch.com
-
ophelia.company
-
learniapp.com
-
inspiredsoulgifts.com
-
citestasdsadasdwebzai.com
-
wwwrijra.com
-
esensites.com
-
projetmaison64.com
-
dailytipsones.com
-
opticseurasia.com
-
muslimsinsport.com
-
kissbeauties.com
-
aminarzhang.com
-
empirepanada.com
-
nilalvesfotografia.com
-
eswensai.com
-
espaciomeig.com
-
pos010000.com
-
qireys.com
-
shethrivesvirtual.com
-
nailch.com
Targets
-
- Target proforma invoice_pdf_____________________________.exe
- Size 1.0MB
- SHA256 137bbdb0a6a00a9167dff5cb670ec17aab82ae50392e12b1cdb6a08110d75285
- MD5 69f7b7c9f79e33e0eed1381300fe305f
- SHA1 a54b8f492a5183e83744a68d9780fd4a1e846f4d
- SHA512 0a1c625caa22eaf915a4fca2daa374a6d72252dcb7daa2cc1bfdb71ff8ade61092150c46a106abb8e7049c0bae03cf54b89813fb2a60858eeba4fbee20fdb4a3
- MD5 SHA1 SHA512
-
Formbook Payload
-
Deletes itself
-
Suspicious use of SetThreadContext