General

  • Target

    ea2bca0128d9498a9905b3408ceb8edecefbc96891ae4bf4403739d21fc98c52.exe

  • Size

    181KB

  • MD5

    f1d020cd788584ca82dd0b8c66fdf85d

  • SHA1

    6119d960a91417bfd814400287d9237308de579c

  • SHA256

    ea2bca0128d9498a9905b3408ceb8edecefbc96891ae4bf4403739d21fc98c52

  • SHA512

    b1db45b15ff3505d9b4b3118400695375678da624fd5e3687af59738e347eebb935e5071b1f6062f981d2115fda4203da8060a3e0086d43a7bbbdf4390929bd3

  • SSDEEP

    3072:6BfukkpsKtV73CliVM5Zal1ZGjAtvsGk/XpwM0yjZzHPoz:RHTCkSZal1ZGiUGSZzHPoz

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

cx01

Decoy

appskul.com

acasascbcenter.com

dististicks.com

ipsmagen.com

car-leasing-54007.com

elboshari-tradeinvestment.info

5777757777.com

brequx.online

kjds11171.top

jgaytfiz3.xyz

guvenceoyunevi.com

ccpandashare.com

alineacustomhomes.com

bwoywonderkids.com

lazersec.com

gewirgq1uw.xyz

aimappq.info

grandcoeur2007.com

giuseppedematolasax.com

aus-anzhelp.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • ea2bca0128d9498a9905b3408ceb8edecefbc96891ae4bf4403739d21fc98c52.exe
    .exe windows x86


    Headers

    Sections