formbook | 4f97be86fd94c84a31cd8aa9bdb4310a6d251d0560e23eebb93d84596df72dfd[.]exe

Sharing

Target
4f97be86fd94c84a31cd8aa9bdb4310a6d251d0560e23eebb93d84596df72dfd.exe
Size 181KB
Sample230420-massvabb6s
SHA256 4f97be86fd94c84a31cd8aa9bdb4310a6d251d0560e23eebb93d84596df72dfd
MD5 c516116fe61221dd8d318f1245803438
SHA1 2abc7b500dab24f627983868b38bcd4339ac5185
SHA512 c131fa4579bb21337233651e60bfeaffaf0c042529c2e2afda1d54639b128a3044dc2756f4d4744d51cf9903b03d9dcabf546db9bcbfa058ec626989a9268118
SSDEEP 3072:wBfukkpsKtV73CliVM5Zal1ZGjAmvsGk/XpwM0yjZzHPoz:3HTCkSZal1ZGhUGSZzHPoz
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

rat cx01 formbook

Family

Version

Campaign

Decoy

Formbook payload 1 IoCs

rat

resource	yara_rule
sample	formbook

4f97be86fd94c84a31cd8aa9bdb4310a6d251d0560e23eebb93d84596df72dfd.exe

.exe 181KB

SHA256 4f97be86fd94c84a31cd8aa9bdb4310a6d251d0560e23eebb93d84596df72dfd
MD5 c516116fe61221dd8d318f1245803438
SHA1 2abc7b500dab24f627983868b38bcd4339ac5185
SHA512 c131fa4579bb21337233651e60bfeaffaf0c042529c2e2afda1d54639b128a3044dc2756f4d4744d51cf9903b03d9dcabf546db9bcbfa058ec626989a9268118
SSDEEP 3072:wBfukkpsKtV73CliVM5Zal1ZGjAmvsGk/XpwM0yjZzHPoz:3HTCkSZal1ZGhUGSZzHPoz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

127248

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths