Overview

overview

10

Static

static

10

a2ed07bb61...6a.exe

windows7-x64

1

a2ed07bb61...6a.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    a2ed07bb61747f46086f07900e698d552f1a36ac21bbeee313894743aeb1276a.exe
  • Size 181KB
  • Sample230420-mbc4sabb7x
  • SHA256 a2ed07bb61747f46086f07900e698d552f1a36ac21bbeee313894743aeb1276a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
ratks01formbook

Malware Config

Extracted

Family

  • formbook

Version

  • 4.1

Campaign

  • ks01

Decoy

  • glchqx.com

  • acpwatertreatment.co.uk

  • hannahschepmann.com

  • cvcv49.top

  • crazy-for-promotion.online

  • goldstreamacademy.africa

  • erasure.monster

  • judiangka.boats

  • fli.group

  • 94ebuy.com

  • enjoyvet.com

  • box618.shop

  • formdr.dev

  • rivierabathrooms.co.uk

  • drawntocolour.com

  • digitalworldobserver.com

  • lonelinessindex.com

  • coachifyfunnels.com

  • abeloewen.com

  • bahujan.store

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat

File Explorer

  • a2ed07bb61747f46086f07900e698d552f1a36ac21bbeee313894743aeb1276a.exe
    .exe 181KB

a2ed07bb61747f46086f07900e698d552f1a36ac21bbeee313894743aeb1276a.exe

  • SHA256 a2ed07bb61747f46086f07900e698d552f1a36ac21bbeee313894743aeb1276a
  • MD5 SHA1 SHA512 SSDEEP
windowsx86

  • Formbook payload

    rat
Minor OS version
Major OS version
Entry point
127360
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths