Agreement-of-Sale.zip  	 
major.exe
	Formbook
	AnyRun: https://app.any.run/tasks/21cc2022-4816-4ee6-806b-10cc9cd4d43d
	Domains:
		tv17260[.]info	
		wedi[.]ltd	
		fotostudiobrugge[.]com	
		seedsofgreen[.]net	
		lifeatthelanding[.]com	
		gzakyy[.]com	
		gan915[.]com	
	IPs:
		217[.]19[.]237[.]54	
		206[.]188[.]192[.]94	
		107[.]183[.]183[.]57	

nass.exe
	Formbook ??
	AnyRun: https://app.any.run/tasks/385747ef-c537-48f4-acac-167b077ebdff
	Domains:
		ankaramerkezservisleri[.]com	
		covzin[.]com	
		tstryout[.]com	
		tksmediaservices[.]com	
		illmakeufit[.]com	
		riverfronthemp[.]com	
		hvwrb[.]info	
		aspolycraft[.]com	
	IPs:
		199[.]192[.]23[.]156	
		103[.]224[.]212[.]222	
		93[.]89[.]226[.]17	
		173[.]194[.]72[.]121	
		184[.]168[.]221[.]59		 
new.exe
	Lokibot
	Anyrun: https://app.any.run/tasks/3d07b705-201e-4ab5-ad1e-2a6e9d0a751c
	Domains:
		avertonbullk[.]com	
	IPs:
		31[.]184[.]253[.]234	
orig.exe
	Agent Tesla
	AnyRun: https://app.any.run/tasks/004e15db-720c-44ac-90c8-119017d7750d
	Maildomain: smtp.yandex.com
	TLS encrypted no pass or user		 	 
origin.exe
	Wouldn't Run 	 
pato.exe
	Agent Tesla
	AnyRun: https://app.any.run/tasks/36fa1c21-ce26-48b5-8a6a-e50326ced596
	Maildomain: smtp.yandex.com
	TLS encrypted no pass or user