General

  • Target

    e8120ddaa86fc56ab083a38b22ca366809e5d1196f3c10175bc745e3dfd15750.exe

  • Size

    181KB

  • MD5

    b851f841b33b2911c454b6126716e71d

  • SHA1

    7628ab856d509adfcd7e8fc4212c71571faf9e2c

  • SHA256

    e8120ddaa86fc56ab083a38b22ca366809e5d1196f3c10175bc745e3dfd15750

  • SHA512

    680f8ff2c2184ab4f88b44743900ea5e6b399e1e13ef05ef2ae43542cc500e818881486ccae2220e3c147181111708395f33bc48e6e9d8220c2b5bd90f00b649

  • SSDEEP

    3072:m81ZkcOYX2iR3h7+gMJOTKjgtCZoEilKag3Tx+Cf9:NRNhig1TKjgtCaPST4CF

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

d03s

Decoy

laurasgreenleaves.co.uk

fantastik3d.com

jsstee.com

foodynation.co.uk

3623wnorthgate.com

titanmedical.africa

keithjacksonlifecoach.com

kardilah.shop

crisscrossfishsauce.com

lojatanamao.online

ceways.com

holybreadstudios.com

c66u.xyz

poococoin.net

exipureyour7best.online

easterislandfoundation.net

09448.voto

gzbzxyy.com

0uqx.xyz

agentfarah.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • e8120ddaa86fc56ab083a38b22ca366809e5d1196f3c10175bc745e3dfd15750.exe
    .exe windows x86


    Headers

    Sections