formbook | fb30c5b4dd6fd89355110f2196bc15e6fb5f771427e448a5e4c19cb6193c49b8[.]exe

Sharing

Target
fb30c5b4dd6fd89355110f2196bc15e6fb5f771427e448a5e4c19cb6193c49b8.exe
Size 181KB
Sample230206-h2phaace54
SHA256 fb30c5b4dd6fd89355110f2196bc15e6fb5f771427e448a5e4c19cb6193c49b8
MD5 40a4a830995f0be6087c82968b335e2c
SHA1 a268f41265161c8525ba96b0984be6aa15d690c8
SHA512 0329f0b8267d041ead8641ec74e097fe170562d9a82077d3e4bb05b87259e213c336fb95ea1acd4006e33a941e77a19e1954af4492e47517aa7b03512f6fd306
SSDEEP 3072:AMBQkmTYiXi0BT35B3Gixc6qzm3QHvCMYhK1f/irMOmdNdO:oIu75pGic6qzm3ov7Y6fKrKdNd
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

rat o12i formbook

Family

Version

Campaign

Decoy

Formbook payload 1 IoCs

rat

resource	yara_rule
sample	formbook

fb30c5b4dd6fd89355110f2196bc15e6fb5f771427e448a5e4c19cb6193c49b8.exe

.exe 181KB

SHA256 fb30c5b4dd6fd89355110f2196bc15e6fb5f771427e448a5e4c19cb6193c49b8
MD5 40a4a830995f0be6087c82968b335e2c
SHA1 a268f41265161c8525ba96b0984be6aa15d690c8
SHA512 0329f0b8267d041ead8641ec74e097fe170562d9a82077d3e4bb05b87259e213c336fb95ea1acd4006e33a941e77a19e1954af4492e47517aa7b03512f6fd306
SSDEEP 3072:AMBQkmTYiXi0BT35B3Gixc6qzm3QHvCMYhK1f/irMOmdNdO:oIu75pGic6qzm3ov7Y6fKrKdNd
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

127152

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths