General
- Target brazil order.scr
- Size 682KB
- Sample220815-jptrxaaha2
- SHA256 e8c2f0fc24e8cc88308a76edbd992b6be7e6036f728a22c5e8fffc1cc199a7c2
- MD5 17a3d3bb480da7510a2db13bd7867210
- SHA1 b77be761282bf96b9ff19420d8709d7bed43c9fd
- SHA512 f703a7fafce6813c797f2cead9d0e82cb25e748cea27dc57b4b684d20eb29c79eceaa5a7e79740c16ff090e1d00326e63bfaa92b7444b406a615365e95afc7fb
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
brazil order.scr
Resource
win7-20220812-en
Malware Config
Extracted
-
formbook
-
4.1
-
p94a
-
wishgrove.com
-
parqueveiculos.com
-
spiderwebs.online
-
chulkanadham.com
-
cdtuan.net
-
zxazm.com
-
payment6528832.xyz
-
fengtaiol.com
-
bffsmovie.com
-
aliceseagerfitness.com
-
garisluruskonsulindo.website
-
analytical-gutter.net
-
ahcq8.com
-
fenyoga.com
-
ecleptic.cat
-
conjurecrafts.com
-
aquaway.date
-
apenpokkenschoonmaakbedrijf.com
-
zgramr.top
-
boweknives.site
-
wf825.com
-
tonysdiary.com
-
alttxt.space
-
digz.us
-
mailim.xyz
-
chromebarbangkok.com
-
toyookahana.com
-
jornalaquadra.net
-
cloudpackages.online
-
xfew.top
-
atherenergy.uk
-
allentownfilmcrew.com
-
gym323.com
-
ballbyball.online
-
youyiw.com
-
mehdifarzi.com
-
dinobro.com
-
bonanzapratamaabadi.com
-
trailer.vegas
-
retro241.space
-
ecole-universite.com
-
magentodesigndublin.com
-
ilovechutney.info
-
451338.com
-
vintagewriting.site
-
008420.com
-
sussexfoodie.co.uk
-
matrix-101.com
-
carolina3dproperties.com
-
clairecorrie.co.uk
-
asafosa.xyz
-
yashpestcontrol.com
-
keilewn.online
-
nirmalmirchandani.com
-
familyibis.sbs
-
anthropologybythewire.com
-
invidgekets.xyz
-
1stconstiution.com
-
byxre.com
-
andresraiter.com
-
1stpartynft.com
-
25thdayoffer.xyz
-
nicehaus.space
-
mhjys.com
-
muuritutkimus.info
Targets
-
- Target brazil order.scr
- Size 682KB
- SHA256 e8c2f0fc24e8cc88308a76edbd992b6be7e6036f728a22c5e8fffc1cc199a7c2
- MD5 17a3d3bb480da7510a2db13bd7867210
- SHA1 b77be761282bf96b9ff19420d8709d7bed43c9fd
- SHA512 f703a7fafce6813c797f2cead9d0e82cb25e748cea27dc57b4b684d20eb29c79eceaa5a7e79740c16ff090e1d00326e63bfaa92b7444b406a615365e95afc7fb
- MD5 SHA1 SHA512
-
Formbook payload
-
Deletes itself
-
Suspicious use of SetThreadContext