top title background image
flash

Etisalat Summary Bill for the Month of May.exe

Status: finished
Submission Time: 2024-06-03 17:31:06 +02:00
Malicious
Trojan
Evader
FormBook

Comments

Tags

  • exe
  • Formbook

Details

  • Analysis ID:
    1451192
  • API (Web) ID:
    1451192
  • Analysis Started:
    2024-06-03 17:31:07 +02:00
  • Analysis Finished:
    2024-06-03 17:43:12 +02:00
  • MD5:
    6eb32cf2b1d4a3b38ef372e6c1d76b04
  • SHA1:
    d72628520b0978a1b1be32f975676858c3d3476c
  • SHA256:
    bcc5a9772d5c0d2a0db971eff31f5a0e6feccdd6cb8defccbea6f00b5967cf38
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 7/38

IPs

IP Country Detection
52.17.119.105
United States
162.55.83.181
United States
118.139.162.229
Singapore
Click to see the 1 hidden entries
35.241.47.216
United States

Domains

Name IP Detection
proxy-ssl-geo.webflow.com
52.17.119.105
www.bricoarq.com
217.160.0.184
www.gasdepo168.com
172.67.165.110
Click to see the 13 hidden entries
www.fashionchc.com
188.114.96.3
vak888.life
118.139.162.229
www.gacordewa288.life
154.83.2.211
wealth-km.online
162.55.83.181
shops.myshopify.com
23.227.38.74
www.wealth-km.online
0.0.0.0
www.goodfellowlawfirm.com
0.0.0.0
www.ekzeanjfolzaks.top
0.0.0.0
www.getwalkapp.com
0.0.0.0
www.vak888.life
0.0.0.0
www.mixefy.shop
0.0.0.0
www.wifmilio.com
0.0.0.0
www.338kp.vip
35.241.47.216

URLs

Name Detection
www.fashionchc.com/ss63/
http://schemas.micro
http://www.fashionchc.com/ss63/www.bricoarq.com
Click to see the 97 hidden entries
http://www.vak888.life/ss63/
http://www.gacordewa288.lifeReferer:
http://www.everymgs01.com/ss63/www.presentiei.shop
http://www.mixefy.shop/ss63/www.ekzeanjfolzaks.top
https://www.msn.com/en-us/news/politics/trump-campaign-says-he-raised-more-than-45-million-in-3rd-qu
https://www.msn.com/en-us/news/politics/republicans-already-barred-trump-from-being-speaker-of-the-h
http://www.mixefy.shop/ss63/
https://windows.msn.com:443/shellv2?osLocale=en-GB&chosenMarketReason=ImplicitNew
http://www.presentiei.shop/ss63/
http://www.bricoarq.comReferer:
http://www.338kp.vip
http://www.ekzeanjfolzaks.top/ss63/
http://www.gacordewa288.life
http://www.fashionchc.com/ss63/
http://www.338kp.vip/ss63/www.wifmilio.com
http://www.mixefy.shop
http://www.presentiei.shop
https://api.msn.com/I
http://www.goodfellowlawfirm.com
http://www.yexoiup.xyzReferer:
http://www.yexoiup.xyz/ss63/
http://www.goodfellowlawfirm.com/ss63/www.gacordewa288.life
https://api.msn.com/v1/news/Feed/Windows?
http://www.getwalkapp.com
https://www.msn.com/en-us/money/personalfinance/10-things-rich-people-never-buy-and-you-shouldn-t-ei
https://www.msn.com/en-us/news/world/us-supplies-ukraine-with-a-million-rounds-of-ammunition-seized-
https://www.msn.com:443/en-us/feed
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2DV-dark
https://api.msn.com/
https://www.msn.com/en-us/news/technology/a-federal-emergency-alert-will-be-sent-to-us-phones-nation
http://www.wifmilio.com/ss63/
http://www.wealth-km.online
https://powerpoint.office.comEMd
http://www.goodfellowlawfirm.comReferer:
https://www.msn.com/en-us/weather/topstories/california-s-reservoirs-runneth-over-in-astounding-reve
https://www.msn.com/en-us/news/us/biden-administration-waives-26-federal-laws-to-allow-border-wall-c
http://www.srisaiprintpack.com/ss63/
http://www.mixefy.shopReferer:
http://www.vak888.life
https://www.msn.com/en-us/money/personalfinance/money-matters-changing-institution-of-marriage/ar-AA
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gMhz-dark
http://www.gasdepo168.com/ss63/
https://assets.msn.com/weathermapdata/1/static/weather/Icons/JyNGQgA=/Condition/AAehwh2.svg
http://www.getwalkapp.com/ss63/www.fashionchc.com
http://www.vak888.life/ss63/www.wealth-km.online
https://excel.office.com-
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gMhz
http://www.wifmilio.com/ss63/www.vak888.life
http://www.bricoarq.com
https://wns.windows.com/e
http://www.bricoarq.com/ss63/
http://www.ekzeanjfolzaks.top/ss63/www.gasdepo168.com
http://www.gacordewa288.life/ss63/
http://www.everymgs01.com/ss63/
http://www.wealth-km.onlineReferer:
http://www.everymgs01.com
http://www.goodfellowlawfirm.com/ss63/
http://www.fashionchc.comReferer:
https://www.msn.com/en-us/news/politics/how-donald-trump-helped-kari-lake-become-arizona-s-and-ameri
http://www.gasdepo168.comReferer:
https://www.msn.com/en-us/money/realestate/why-this-florida-city-is-a-safe-haven-from-hurricanes/ar-
http://www.gasdepo168.com
https://word.office.comM
http://www.getwalkapp.com/ss63/
http://www.ekzeanjfolzaks.top
https://api.msn.com:443/v1/news/Feed/Windows?
http://www.srisaiprintpack.comReferer:
https://www.msn.com/en-us/money/savingandinvesting/americans-average-net-worth-by-age/ar-AA1h4ngF
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13f2DV
http://www.srisaiprintpack.com
http://www.everymgs01.comReferer:
http://www.yexoiup.xyz/ss63/www.srisaiprintpack.com
http://www.presentiei.shopReferer:
http://www.gasdepo168.com/ss63/www.everymgs01.com
https://www.msn.com/en-us/news/politics/kevin-mccarthy-s-ouster-as-house-speaker-could-cost-gop-its-
http://www.wealth-km.online/ss63/
http://www.srisaiprintpack.com/ss63/Syst
http://www.yexoiup.xyz
http://www.ekzeanjfolzaks.topReferer:
http://www.338kp.vip/ss63/
https://www.msn.com/en-us/news/us/dumb-and-dumber-12-states-with-the-absolute-worst-education-in-the
https://activity.windows.com/UserActivity.ReadWrite.CreatedByApp
https://outlook.come
https://android.notify.windows.com/iOS
http://www.wifmilio.comReferer:
http://www.fashionchc.com
http://www.gacordewa288.life/ss63/www.getwalkapp.com
https://www.msn.com/en-us/travel/news/you-can-t-beat-bobby-flay-s-phoenix-airport-restaurant-one-of-
https://windows.msn.com:443/shell?osLocale=en-GB&chosenMarketReason=ImplicitNew
https://api.msn.com/v1/news/Feed/Windows?activityId=435B7A89D7D74BDF801F2DA188906BAF&timeOut=5000&oc
http://www.vak888.lifeReferer:
http://www.presentiei.shop/ss63/www.yexoiup.xyz
http://www.338kp.vipReferer:
https://assets.msn.com/weathermapdata/1/static/finance/1stparty/FinanceTaskbarIcons/Finance_Earnings
http://www.bricoarq.com/ss63/www.mixefy.shop
http://www.wifmilio.com
http://www.wealth-km.online/ss63/www.goodfellowlawfirm.com

Dropped files

No malicious files found. See full and IOC report for all dropped files.