Overview

overview

10

Static

static

10

52d8942e61...d8.exe

windows7-x64

1

52d8942e61...d8.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    52d8942e61bd4086fcff78395b40844a7cf525ce5e1201544451e8cd2113e8d8.exe

  • Size

    181KB

  • MD5

    3a39a7b7684baebe8b5fc5f1f16ff09b

  • SHA1

    4aac2d8d96c2a952adad7074bdef654d76439e97

  • SHA256

    52d8942e61bd4086fcff78395b40844a7cf525ce5e1201544451e8cd2113e8d8

  • SHA512

    0d6be9719afc36687c7e9224eccc937ec500dc92c4df6a4b37c88dde5e41791c772f846534c6317c3f1c76c21adf0408a30c9bc3d5f799aa19f96e3a2be90d98

  • SSDEEP

    3072:fMuck0YCUzDPZ2JezlZP56s8O2CZF7kl6z2p8zA8wxQkxIz+jk:E+QUr56s8O2kO6zEzQkxrj

Score
10/10
ratcz30formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

cz30

Decoy

valeriepuma.com

rentyourbag.com

unglesbyessure.com

ahzmjy.site

taazdelights.online

conexoesnews.com

istprimeway.com

elwf4tlu.shop

661.support

fournaisehk.com

glechiu.xyz

2r2pv2.shop

902523.rip

bruggicapy.com

westmobileautodeatailers.online

muaad.co

gridxsens.com

victoronedesigns.com

tecexpressbr.com

crea4net.com

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 52d8942e61bd4086fcff78395b40844a7cf525ce5e1201544451e8cd2113e8d8.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections