formbook | decode_138335e60957a76d8318ae543e141ee956bd1d04166e60d1e54db1fb4af0ba4f[.]exe

Sharing

Target
decode_138335e60957a76d8318ae543e141ee956bd1d04166e60d1e54db1fb4af0ba4f.exe
Size 185KB
Sample230123-s3mp7adh98
SHA256 8c5606a7010f8a4d5701c1b99fd91af0d1b59bf9bbedb345ba09b449a70fc29f
MD5 b9733f37cece130cdf3480b30bd7e60b
SHA1 313880e20c871ac56e3adaefe35732546ebaba58
SHA512 d04616b23d9a983770cbddc130b53790827a23a62b5f8f3982169f1160adde53771cd37698df47eefb83801a9e219f948af4f9c56e9a7286ae1488294e07c32a
SSDEEP 3072:JqdYEHxkjxBqq3AfhTutpLKHL2yTMyAoXH1guZTtUxiXXTgafH:ItsAZQpLKHL2+MnoXOuZTtUIXTh
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

rat gs12 formbook

Family

Version

Campaign

Decoy

Formbook payload 1 IoCs

rat

resource	yara_rule
sample	formbook

decode_138335e60957a76d8318ae543e141ee956bd1d04166e60d1e54db1fb4af0ba4f.exe

.exe 185KB

SHA256 8c5606a7010f8a4d5701c1b99fd91af0d1b59bf9bbedb345ba09b449a70fc29f
MD5 b9733f37cece130cdf3480b30bd7e60b
SHA1 313880e20c871ac56e3adaefe35732546ebaba58
SHA512 d04616b23d9a983770cbddc130b53790827a23a62b5f8f3982169f1160adde53771cd37698df47eefb83801a9e219f948af4f9c56e9a7286ae1488294e07c32a
SSDEEP 3072:JqdYEHxkjxBqq3AfhTutpLKHL2yTMyAoXH1guZTtUxiXXTgafH:ItsAZQpLKHL2+MnoXOuZTtUIXTh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

127040

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths