formbook | d93db44add0a1601472c9367293d29af274a2dca1bf9ef4c0829755000c3c37f[.]zip

General

Target

d93db44add0a1601472c9367293d29af274a2dca1bf9ef4c0829755000c3c37f.zip
Size

135KB
MD5

4ee670c8d5e1e1aa7fb5037d3220c847
SHA1

8a03cc32e54ed5ac281331ab248de69fc11bbb2e
SHA256

0ca775f8907f801c5c2bdc760230421e0e47594ea3dd54898c4b9694e528911e
SHA512

00cf184feda2e48965f223edbbae447be4bdd2347beda80b10cfcb773ef62ec55dc8d5137370acd535d23bb709c783b56ac11f7d72e634fdcf4b023c5c0deea3
SSDEEP

3072:SuPLxZHcCBSkaswmroyuQ0f+aQuDlI0OO4jq/R6FnfItTUHtXEPB:zNZ87/sw6oxvc4d/R65fSW5I

Score

10^/10

rat qsqm formbook

Malware Config

Extracted

Family

formbook

Campaign

qsqm

Decoy

gYI8BO7T7BQOBw==

5kKpX8NHT4cITCAOEkMYvi5HiMZ5

oq5lCVwFY9KNJipM

OiTOjWhDMXBf8H9o79k=

rSDHx5jqNn3Sz/LND/0G

ob6FSUE4NYUi5Iqg1YGfMg==

fI5oMbAC5EAeerSKKRM2PjF7TYJh

lmWieqE8QHg=

yLxwFWm+rbCJXqE=

MyY9R8VCSaAtEJY2MdHAXKY=

WYA53Ezjh808

EPu6bfMPNJUh

upyUkeqQ6B/FJyq2PCiwnZf/

RvN3e2hDLJQmo9qtZTVoRmPi

hZhWEObjh808

K1gowrFsO5p0UchTUEVoRmPi

7hXPaZ6i+F7o2L8OCCyhNA==

bIp+E/xrSG9QHA==

+EPrJAdvSG9QHA==

METFhoRGH1sBBWhAbA==

Signatures

Formbook family
formbook

Files

d93db44add0a1601472c9367293d29af274a2dca1bf9ef4c0829755000c3c37f.zip
.zip

Password: infected
d93db44add0a1601472c9367293d29af274a2dca1bf9ef4c0829755000c3c37f.exe
.exe windows x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 179KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Extracted

Signatures

Files

Password: infected

Password: infected

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 179KB - Virtual size: 180KB

.text
Size: 179KB - Virtual size: 180KB