Overview

overview

10

Static

static

10

2cb4344891...7b.exe

windows7-x64

2cb4344891...7b.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cb43448918683cb58b0060a1178a07b

  • Size

    292KB

  • MD5

    2cb43448918683cb58b0060a1178a07b

  • SHA1

    778a620d01ad37f042517c594f7d795fbb1fbdb9

  • SHA256

    6804730bab9257121764165413b3c6ae4e89c0ad7cf1797ec07d566caa90c79b

  • SHA512

    064f84022a6e4dc85e302484d8af8366b6bde472b1367715145e3ba9b7b9f1f20debbecdf6d51ad98b83334d326c7cb4758551babb5004929bd222d88d8db92d

  • SSDEEP

    6144:50/Nv94C3qHki6UdpCZo5oQI1mv99k8xCLxzcn5NqxJB2Cj/65Rx2kWA0s:8Nv9FOki6UdpCZo5oQgO99k8xCVNxJBb

Score
10/10
rathx288formbook

Malware Config

Extracted

Family

formbook

Version

3.8

Campaign

hx288

Decoy

expo2020spain.com

jerseys.services

path2.life

rainbowsoftit.com

erpsoftware-pros.click

elifedesign.com

1mxsport.com

agenciaturismovirtual.com

lot12foresthillsdrive.info

youlewanhappy.com

wmyuwbxm.link

sdhuben.com

ecexf.info

renesalas.com

tendermerciesdesigns.com

oferta.guru

noithatlongkhanh.net

ventmoto.com

westcoastwrapsandbeads.com

frontgravity.com

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2cb43448918683cb58b0060a1178a07b
    .exe windows:4 windows

    476f92c8f9ddbcb805cdc5c61fbc5635


    Headers

    Imports

    Sections