General
-
Target
3c0502b791c861356ec9f97a2324f5bc20852dbc2a203bd427fc247955faf16e.exe
-
Size
181KB
-
MD5
1866f12158e36e6590352c97ae627647
-
SHA1
1507630e0108daa802041529e67452e3c7b8be55
-
SHA256
3c0502b791c861356ec9f97a2324f5bc20852dbc2a203bd427fc247955faf16e
-
SHA512
4e0723e41b79a3a8074e4c001a8b4218b9045d9ee576e2c0755632421516a8aad66495edb1a027f6934d4ae4ff401f784bc98909ce1f023736f0881814206975
-
SSDEEP
3072:QxsKECe7s8QoDn3k8Q5sREIKZq6q6G+dM+Sws17imXbd5Z+uwtef:uc3k5+Kq6q6G+dMis7HAuwc
Malware Config
Extracted
formbook
4.1
gg62
growfast.africa
lerema.com
38945.se
wheelfermotors.africa
giftshareforyou.online
burrismktg.com
keepgrowing.uk
efefhomeless.buzz
bryanokoh.com
fashion-clothing-40094.com
andreasunshine.com
naijahood.africa
aditrirealty.com
kinnoitodatsumou.com
cryptoqzclimax.com
hairly.biz
comeuphither4.com
integrity360.ltd
flushywhole.com
8869365.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
Files
-
3c0502b791c861356ec9f97a2324f5bc20852dbc2a203bd427fc247955faf16e.exe
Headers
Sections