General
-
Target
4a315242b8f5619463853e2d7edea38ccc32a0ac71bf996a6c4d6b27388e6809.exe
-
Size
181KB
-
MD5
79c1e8c82981d1324982e1e070fb723f
-
SHA1
db3ff3d130b7b4d2e616097586695feee16b7631
-
SHA256
4a315242b8f5619463853e2d7edea38ccc32a0ac71bf996a6c4d6b27388e6809
-
SHA512
71b80d6a52dc5dc7140ce39769858217a2db1973392d524166d55d427fe9fe2ef0568adef39789244dc9c7b2bfaf9b916331e53080c88c8391383b6601dcc8fb
-
SSDEEP
3072:xMuck0YCUzDPZ2JezlZP56s8O2CZ67kl6z2p8zA8wxQkxIz+jk:C+QUr56s8O2fO6zEzQkxrj
Malware Config
Extracted
formbook
4.1
cz30
valeriepuma.com
rentyourbag.com
unglesbyessure.com
ahzmjy.site
taazdelights.online
conexoesnews.com
istprimeway.com
elwf4tlu.shop
661.support
fournaisehk.com
glechiu.xyz
2r2pv2.shop
902523.rip
bruggicapy.com
westmobileautodeatailers.online
muaad.co
gridxsens.com
victoronedesigns.com
tecexpressbr.com
crea4net.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4a315242b8f5619463853e2d7edea38ccc32a0ac71bf996a6c4d6b27388e6809.exe
Headers
Sections