General

  • Target

    b63fc3cb35e5d0f4dc71f25e700b86c151d30efe022d43a3033fe25499d720d7.exe

  • Size

    181KB

  • MD5

    c15cbd34b23dff033b38f3cfabd93d5e

  • SHA1

    fdd1403bd3c2084cd63639500e60f111f04524eb

  • SHA256

    b63fc3cb35e5d0f4dc71f25e700b86c151d30efe022d43a3033fe25499d720d7

  • SHA512

    c78d595c62b86d912dc980c0e5f67fc01a7c8867238e9c769e70e651285772cd18c9da93294c170914ae9520eaf4a8eedb2d9b94759e36a85033f72d8890c4c5

  • SSDEEP

    3072:kQoEcpycyGf63ktgBZsKlNgoDi6CzMtiMmLtWUHnVg5:+QA8kGB6KlNg8SMsMGtWgVU

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

nn23

Decoy

sheilcyfashionstore.com

koikapr.com

brixu.xyz

clickoffice.club

baltimoredickens.com

alfa-production.com

ff84567.com

recargatucelupersonal.uno

carefind.co.uk

homeair-conditioning.com

ozbitkisel.net

jastech.africa

codegiare.shop

earthlings.estate

aluminiosmiquelsoler.com

wetcamera.africa

gkcihep.cyou

circlesewingvac.com

95525.vip

91yz955.xyz

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • b63fc3cb35e5d0f4dc71f25e700b86c151d30efe022d43a3033fe25499d720d7.exe
    .exe windows x86


    Headers

    Sections