Overview

overview

10

Static

static

10

6e712a8a98...fc.exe

windows7-x64

1

6e712a8a98...fc.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e712a8a989b15c1469d1aab013e1374c2aefe81c06ba82d81deb00ea597f5fc.exe

  • Size

    181KB

  • MD5

    4b95905b4641761632e01c9a13d829a0

  • SHA1

    2def810a6611892b5938268d146cd57473ac35f8

  • SHA256

    6e712a8a989b15c1469d1aab013e1374c2aefe81c06ba82d81deb00ea597f5fc

  • SHA512

    f8b23f900782ddcfa0a2659291891b8350f2b8aa7a594ff1c2efa82f242d58f4d0b6f41be49c97c3e0824e62d697287be1e3cd75f9a97de9aff9ab71ca5e21b4

  • SSDEEP

    3072:wGSfhE5u+KYx33/yvm2CjiwaH0QU8ouHZoCkiXidG/UQMEVrmS:0yZH/YH2aH0QU8oMuCfXR/UQL

Score
10/10
ratgn56formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

gn56

Decoy

guidanceon.com

clasmiv.xyz

jackcphillips.com

blackdogjj.com

fawazgruosi.co.uk

browardmanatee.com

332degrees.com

lifepadelclub.com

dbepa.com

ampulbic.com

lnterac-official.com

firstcall-locksmiths.com

c33d-s5nx.com

1233fowler.com

cbmprintingworldwide.net

globalpress.xyz

forumbetong.se

gerutcustmer.com

kavehleo.com

montbelvieulawyer.net

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6e712a8a989b15c1469d1aab013e1374c2aefe81c06ba82d81deb00ea597f5fc.exe
    .exe windows x86


    Headers

    Sections