General
-
Target
48147474eaef88b0ba2927745819466064ba02897a21fb1f7a4022edc1bcb8da.zip
-
Size
693KB
-
Sample
240622-bjrflatfkp
-
MD5
2c277456e264ebae3cec78449460f879
-
SHA1
8d65e99e145af331a0242ef5a5824bd90f046022
-
SHA256
48147474eaef88b0ba2927745819466064ba02897a21fb1f7a4022edc1bcb8da
-
SHA512
5a6a48707e785f3c9dad24b2c8b2722be05ca2a3884c05133e248f405e73c001a79483ca28f22a0015e109caecfd78cd2ccd63acb0ca9c284310b655f7cb3d39
-
SSDEEP
12288:rKzm2LZ4z7NxhY5tz1ru3evlXwRan3VoSd+THwfZAzZ6fNOKHDjojp:gUN0HK3SlARan3SSdZfZAgfNOKHD0jp
Static task
static1
Behavioral task
behavioral1
Sample
MV Starship.exe
Resource
win7-20240611-en
Malware Config
Extracted
formbook
4.1
ty31
jejakunik.com
inb319.com
jifsjn.buzz
gkyukon.site
43443.cfd
cogil69id.com
oeaog.com
lpgatm.com
mymarketsales.com
tomclk.icu
404417.online
nysconstruction.com
ourwisequote.com
ahsanadvisory.com
ottawaherps.com
forevermust.com
apartments-for-rent-47679.bond
kdasjijaksdd.icu
buthaynah.com
manggungjayakanopi.com
cookygan.com
regalessencebeautystudio.com
material.directory
szxart.xyz
ykdbyjk.xyz
hankahve.com
tiituitdsa.net
avantbrews.com
springpace.com
seriesjeans.com
technikwunder.com
angellsonline.com
soujany.com
buysleepp.com
voltvanbage.com
qdhaohuisuan.com
bluedolphinshop.com
aguanegocios.com
abstractdiffusion.com
bahisanaliz16.xyz
weight-loss-34761.bond
x216.icu
twmallll.com
poalsdji.buzz
agtsolargrowth.biz
pixelcloudtec.com
0512155.com
mypsychedeliceducation.com
0306951.top
screw-air-compressor.com
10140wildhawk.com
antheaclinic.com
tppclients.com
needpickleball.com
iraq-visions.com
rtpbonanza138.skin
wjzjs.com
dw6msr8.icu
lepriossa.com
tiktokglobal.shop
youwu.autos
tripshipglobal.com
ncpekingducktogo.com
winbd24.com
xiaobanhome.com
Targets
-
-
Target
MV Starship.exe
-
Size
1.1MB
-
MD5
7735fefaf6b16dd97499d0d2016dff1b
-
SHA1
598d7c0eea1ca5fee2f7d8c052a01225bcd72761
-
SHA256
3cc81b7a9a59609e3267d06fad726352660b7c2e5c896c193939aff4744d499d
-
SHA512
4df13f92972522e14497ad16051b876983caf97810bb00128030b0121289eb11cf4774b5f458ae04a0ba3b7ceb4a2b6de913dddfef357fd8a164eff3093c4ad9
-
SSDEEP
24576:IAHnh+eWsN3skA4RV1Hom2KXMmHaxnRjGf9UYfLOKlD6J1y5:Ph+ZkldoPK8YaxnRjGSYfLdRN
-
Formbook payload
-
Suspicious use of SetThreadContext
-