General

  • Target

    b87fa8da6f775f13b1d72b19c0b107e87f875f71a69426ec24b61d7fb98929ae.exe

  • Size

    181KB

  • MD5

    23cc9424daf0f44ea912e77ce8302447

  • SHA1

    0e41e5f6f6da3e85747fe57c3243e4f74c8ca8bd

  • SHA256

    b87fa8da6f775f13b1d72b19c0b107e87f875f71a69426ec24b61d7fb98929ae

  • SHA512

    fbbda8cb1b491d070e450372bf7fa81c571fd5a1edfecd229332c5940d62b1b4f94c548a2e7ad7fe87f4541deca4f48454941cb49f1011f09b46d37e3f739cdd

  • SSDEEP

    3072:sGcUkxSHP3Er83AYT8NGSYW67OycHpITU+ucNRPvCwlUKw:sysyAq6x6KycJUucNRP

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

oa09

Decoy

grit.careers

kingthaivegas.com

onwingirisleri.net

radio-jesus.com

forestfairiesnft.com

healthyintimatelifestyle.africa

karamoghanasti.africa

gqujtf.com

chaindenmark.com

netzerosemitechnologies.co.uk

kakekpecah1000.com

fiddler-foaled.click

adventurepsychologist.com

miletong.net

discounttirestoresinc.com

goldmanmediaent.com

entsorgunglangnau.ch

brezop.xyz

24-02-2022.site

artificialgrassminneapolis.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • b87fa8da6f775f13b1d72b19c0b107e87f875f71a69426ec24b61d7fb98929ae.exe
    .exe windows x86


    Headers

    Sections