General

  • Target

    9869161f7e5c3db884c0c8d55a4b02bacc81519e57f103a4c4d206bdf7fb6161.exe

  • Size

    181KB

  • MD5

    d8a79a62f832985d259aaa994cd80ea3

  • SHA1

    6aad98bec67e364d5ced15052de087dd78e482f8

  • SHA256

    9869161f7e5c3db884c0c8d55a4b02bacc81519e57f103a4c4d206bdf7fb6161

  • SHA512

    95c394765eee639387fc6047221e8fd1cbae6ac9333fcc7479aa90768b1935bb56c96bf434f222f57ed8eeacecec448847846c5fd96edf0d151b5c3cdbd7efb2

  • SSDEEP

    3072:CnkhdFr9sg4LrZalNVQG/O2rxp76ycpXCtGM4qOsm1Tp4kPjRB9E:9FscJQGW2L6ycpytT5m9p4kPjRBa

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

nes8

Decoy

simantsfamily.com

ninobrowndelivery.net

y94x.info

huibi01.vip

davidspanu.com

swegon.tech

moapulsa.com

coveredseguros.com

owltoon.site

loyalguardianop.com

banca-particulares.icu

innovativanimal.com

girlschools.top

smartbed-gb-tok.life

vhail.store

bluffdalecitizens.info

asmcpn.us

wordybag.online

smmfsa.com

jinglunqhd.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 9869161f7e5c3db884c0c8d55a4b02bacc81519e57f103a4c4d206bdf7fb6161.exe
    .exe windows x86


    Headers

    Sections