Overview

overview

10

Static

static

10

d154460434...87.exe

windows7-x64

1

d154460434...87.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    d1544604348008fe3cc10c72a6e1903c47fa78d2fa53c1a04aebcb2c8e187287.exe

  • Size

    181KB

  • MD5

    4cb3871802c587642f03bd368b5747e9

  • SHA1

    c8b0768f3c3fe0bf3bee297cfc42dbe083a1fedc

  • SHA256

    d1544604348008fe3cc10c72a6e1903c47fa78d2fa53c1a04aebcb2c8e187287

  • SHA512

    e433b476605e22fb5ae2f028d582c53476960553888240b4bc58a03b8f35ebd691d07074cf21a3b6e9c41192dfec5b677af488f4ecd3db0a5f2b18f60604c850

  • SSDEEP

    3072:wMuck0YCUzDPZ2JezlZP56s8O2CZR7kl6z2p8zA8wxQkxIz+jk:R+QUr56s8O2EO6zEzQkxrj

Score
10/10
ratcz30formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

cz30

Decoy

valeriepuma.com

rentyourbag.com

unglesbyessure.com

ahzmjy.site

taazdelights.online

conexoesnews.com

istprimeway.com

elwf4tlu.shop

661.support

fournaisehk.com

glechiu.xyz

2r2pv2.shop

902523.rip

bruggicapy.com

westmobileautodeatailers.online

muaad.co

gridxsens.com

victoronedesigns.com

tecexpressbr.com

crea4net.com

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d1544604348008fe3cc10c72a6e1903c47fa78d2fa53c1a04aebcb2c8e187287.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections