General
-
Target
c4fb6a54f9d13d0b7d68c344642587d2.bin
-
Size
185KB
-
MD5
c4fb6a54f9d13d0b7d68c344642587d2
-
SHA1
5d5f8a45e56add2a6ff277f8d5fa06a29ada957a
-
SHA256
31bca1958a79f4759d45877792d31ce6489a9b12abfd306218cab030f8f86e0b
-
SHA512
7db73aa24b61d85022c23a924025acd2e2e98d03b00eada01140152ee6acd82754e0a1ed2745c11234679d1b61343e1fa854a06af3841524ab7b797ca9f271ed
-
SSDEEP
3072:I3k9Eu2PDPlFm3TiZHhJmoapMZRrr9d+/eqeibwnFUMGBY8:zkQTeHlaGZRX9K4XeY8
Malware Config
Extracted
formbook
4.1
ar73
classgorilla.com
b6817.com
1wwuwa.top
dgslimited.africa
deepwaterships.com
hkshshoptw.shop
hurricanevalleyatvjamboree.com
ckpconsulting.com
laojiangmath.com
authenticityhacking.com
family-doctor-53205.com
investinstgeorgeut.com
lithoearthsolution.africa
quickhealcareltd.co.uk
delightkgrillw.top
freezeclosettoilet.com
coo1star.com
gemgamut.com
enrichednetworksolutions.com
betterbeeclean.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
Files
-
c4fb6a54f9d13d0b7d68c344642587d2.bin
Headers
Sections