General
- Target รายละเอียดและคุณสมบัติ.exe
- Size 309KB
- Sample230108-cbjlfsce75
- SHA256 0cb30d7e5f9476afb6ff37eeac4dcc524fe63105433d7388ca709ba6e9a0539e
- MD5 bb7fb0eeddef2fff12b9cde22a2e18c1
- SHA1 350867046c5a20a6af9d6311917b1a84491110a2
- SHA512 1f0b14b019401261227bee1a23700e271aca3e71d9ce86f5a252aedb6f5019a5f2d1c1c7ed475bfa8a977b9310d6628e52875b2a5fa9934fe27ffefb2b635dda
- SSDEEP 6144:2Ya6AXJKNAqsPgNylUJ0BeTgBxj3v3O7UkQIbNhbZekD7S:2YS5lhgNyy6BeTgBx7v4bfb6
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
รายละเอียดและคุณสมบัติ.exe
Resource
win7-20220812-en
Malware Config
Extracted
-
formbook
-
4.1
-
vr84
-
intouchenergy.co.uk
-
lalumalkaliram.com
-
hillgreenholidays.co.uk
-
fluentliteracy.com
-
buildingworkerpower.com
-
by23577.com
-
gate-ch375019.online
-
jayess-decor.com
-
larkslife.com
-
swsnacks.co.uk
-
bigturtletiny.com
-
egggge.xyz
-
olastore.africa
-
lightshowsnewengland.com
-
daily-lox.com
-
empireoba.com
-
91302events.com
-
lawrencecountyfirechiefs.com
-
abrahamslibrary.com
-
cleaner365.online
-
getmicrostock.net
-
lightyearsmgmt.com
-
dentanorma.store
-
jbproductions.net
-
acideastern.com
-
jayess-decor.com
-
harpy.life
-
arcadiatownhomesut.com
-
407loans.com
-
kxzi803.com
-
flirtmate.network
-
mogi.africa
-
goohodao.xyz
-
rijnaq.xyz
-
valourcollection.africa
-
lateliergc.com
-
tsunamieng.africa
-
ctjhpw3.vip
-
dikevolesav.info
-
everyclick.africa
-
595255.biz
-
aissw.com
-
digitalpro.africa
-
giantcourtyard.com
-
windkind.net
-
gp5757.com
-
kino-plasmat.com
-
led-lighting-90688.com
-
cyzhan.top
-
connectionsluxury.com
-
14782.se
-
alekseevich1.ru
-
3wmsr.com
-
checkssuanalong.com
-
coveringattorney.com
-
alshshamil.com
-
justkillem.com
-
jmd58.net
-
e0pvb3.shop
-
fireballmedia5.com
-
markallenit.com
-
dampymatter.com
-
hrunmall2193.com
-
faithfultransitions.com
-
fyndme.net
Targets
-
- Target รายละเอียดและคุณสมบัติ.exe
- Size 309KB
- SHA256 0cb30d7e5f9476afb6ff37eeac4dcc524fe63105433d7388ca709ba6e9a0539e
- MD5 bb7fb0eeddef2fff12b9cde22a2e18c1
- SHA1 350867046c5a20a6af9d6311917b1a84491110a2
- SHA512 1f0b14b019401261227bee1a23700e271aca3e71d9ce86f5a252aedb6f5019a5f2d1c1c7ed475bfa8a977b9310d6628e52875b2a5fa9934fe27ffefb2b635dda
- SSDEEP 6144:2Ya6AXJKNAqsPgNylUJ0BeTgBxj3v3O7UkQIbNhbZekD7S:2YS5lhgNyy6BeTgBx7v4bfb6
- MD5 SHA1 SHA512 SSDEEP
-
Formbook payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext