formbook | e9401ef816354b65fc208d692fa8b94c[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
e9401ef816354b65fc208d692fa8b94c.exe
Size 607KB
Sample201109-dackmqmwsx
SHA256 ed3318102d772c4dcecfb1e10f37cfd3fdcbaff1d340ba9c2bc5dcfe6383f339
MD5 e9401ef816354b65fc208d692fa8b94c
SHA1 291996028f7df646794aef71199200c4d72aa6bc
SHA512 21802ab6d6809c91bb431c72d02eec9a9b7c49f34543d49bdc3bd3d5cb2c8cab0daedfcb02c9b6de3cee3e34e411a596255362e9edcdd2407c0bee8ea0619762
MD5 SHA1 SHA512

Score

10^/10

rat formbook

Malware Config

Signatures

Formbook Payload 1 IoCs

resource	yara_rule
sample	formbook

Formbook family
formbook

File Explorer

e9401ef816354b65fc208d692fa8b94c.exe

.exe 607KB

e9401ef816354b65fc208d692fa8b94c.exe

SHA256 ed3318102d772c4dcecfb1e10f37cfd3fdcbaff1d340ba9c2bc5dcfe6383f339
MD5 e9401ef816354b65fc208d692fa8b94c
SHA1 291996028f7df646794aef71199200c4d72aa6bc
SHA512 21802ab6d6809c91bb431c72d02eec9a9b7c49f34543d49bdc3bd3d5cb2c8cab0daedfcb02c9b6de3cee3e34e411a596255362e9edcdd2407c0bee8ea0619762
MD5 SHA1 SHA512

windows x86

Formbook Payload

rat