Overview

overview

10

Static

static

10

b4ae90babb...10.exe

windows7-x64

1

b4ae90babb...10.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    b4ae90babbf85fb137c173dbc6a8791c9b40a7d9b32ab70ef81284736c683710.exe

  • Size

    182KB

  • MD5

    fecd6f2a5e4a94cc09b721727a86295d

  • SHA1

    8d62a8780080340e42046dd40185da0f9207a9f7

  • SHA256

    b4ae90babbf85fb137c173dbc6a8791c9b40a7d9b32ab70ef81284736c683710

  • SHA512

    a1a1b7de84cb298a497f53b1e159fb2f424eb9b6a9ffcba0b9b38748fee4be6a419ce2ccd3e8467d361740bb25f36aefb8db5cd6969942f5dc18cb387aadc21a

  • SSDEEP

    3072:gPEUkhyXt4Dg3h4IM2GH4j7evbUluEApIpZ7HYrqHbq5cPmmDU:tBuhFMDYj7ev4luXpIYrqHis

Score
10/10
ratsy22formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

sy22

Decoy

logichunter.com

kp34.vip

ellementscrystalco.com

investcentre.club

veloxcarriers.africa

luxureejewelries.africa

clubmaie.com

gomophyio.site

usapaperballots.com

endviolence.ooo

cambrianopps.net

melkas.africa

arcteryxphilippinesstore.com

ancientcrew.com

davisgeneral.store

vieop.online

homemaintenence.com

jobrides.com

cheaphealthyfood.com

creusetonline.com

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat

Files

  • b4ae90babbf85fb137c173dbc6a8791c9b40a7d9b32ab70ef81284736c683710.exe
    .exe windows x86


    Headers

    Sections