formbook | b71909f3cd1d9b763d573a9c76b36fcb98e57c9eba7b54a35fbe5ad154efc52e[.]exe

Sharing

Target
b71909f3cd1d9b763d573a9c76b36fcb98e57c9eba7b54a35fbe5ad154efc52e.exe
Size 181KB
Sample230220-knqvashg21
SHA256 b71909f3cd1d9b763d573a9c76b36fcb98e57c9eba7b54a35fbe5ad154efc52e
MD5 06efee70a18a162205ebff5cdf1883b4
SHA1 f493f3fec07a21d38d5041828d08df5e1ce371cf
SHA512 593d6b397f54e39e568e13e14c21163a924b4c2e12b9cb7351b3530a8d2673c5c23ccda05a3d78504641e316357f223af9e73e0dc4a39efea943240f2e0d6cab
SSDEEP 3072:AKMEfcKBB2vIN34+UZuEquJ838xMxgl+9CGi5WW/fLAO:vcoB4jZ5quJ839xcefWbA
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

rat ho62 formbook

Family

Version

Campaign

Decoy

Formbook payload 1 IoCs

rat

resource	yara_rule
sample	formbook

b71909f3cd1d9b763d573a9c76b36fcb98e57c9eba7b54a35fbe5ad154efc52e.exe

.exe 181KB

SHA256 b71909f3cd1d9b763d573a9c76b36fcb98e57c9eba7b54a35fbe5ad154efc52e
MD5 06efee70a18a162205ebff5cdf1883b4
SHA1 f493f3fec07a21d38d5041828d08df5e1ce371cf
SHA512 593d6b397f54e39e568e13e14c21163a924b4c2e12b9cb7351b3530a8d2673c5c23ccda05a3d78504641e316357f223af9e73e0dc4a39efea943240f2e0d6cab
SSDEEP 3072:AKMEfcKBB2vIN34+UZuEquJ838xMxgl+9CGi5WW/fLAO:vcoB4jZ5quJ839xcefWbA
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

127088

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths