formbook | 70eb12fb44e4b07a126e2e899c191fcaa482864709a5123dea76795bd2ee3008[.]exe

Sharing

Target
70eb12fb44e4b07a126e2e899c191fcaa482864709a5123dea76795bd2ee3008.exe
Size 181KB
Sample230420-mas4lsbb6t
SHA256 70eb12fb44e4b07a126e2e899c191fcaa482864709a5123dea76795bd2ee3008
MD5 67e5c96dcfd6408f62d89402910b24e2
SHA1 8cf0e0e30d7046780b59cfb086c1d3e4a38f1622
SHA512 c7ef8832a07fbfb25b2830d9ef1d58b07b6c0869f8085c3d26ea9f8c4c709caa3a73bb5957055ba684c203f16843bf980fedae2ea3913ab2ccd93c3f2d33eea2
SSDEEP 3072:+wJFEh7A2hy+b13/R6r6Kj9uWcBeKIdo0Z56zGDX+SGj2g9v:e7NZ/EeKj9uWdKId7nBX+z
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

rat re29 formbook

Family

Version

Campaign

Decoy

Formbook payload 1 IoCs

rat

resource	yara_rule
sample	formbook

70eb12fb44e4b07a126e2e899c191fcaa482864709a5123dea76795bd2ee3008.exe

.exe 181KB

SHA256 70eb12fb44e4b07a126e2e899c191fcaa482864709a5123dea76795bd2ee3008
MD5 67e5c96dcfd6408f62d89402910b24e2
SHA1 8cf0e0e30d7046780b59cfb086c1d3e4a38f1622
SHA512 c7ef8832a07fbfb25b2830d9ef1d58b07b6c0869f8085c3d26ea9f8c4c709caa3a73bb5957055ba684c203f16843bf980fedae2ea3913ab2ccd93c3f2d33eea2
SSDEEP 3072:+wJFEh7A2hy+b13/R6r6Kj9uWcBeKIdo0Z56zGDX+SGj2g9v:e7NZ/EeKj9uWdKId7nBX+z
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

127312

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths