Overview

overview

10

Static

static

10

dcd550058c...55.exe

windows7-x64

1

dcd550058c...55.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    dcd550058c9d0ddf7734ae149ca1f6d333e5873ab97af5453570d7d5e3deac55.exe

  • Size

    181KB

  • MD5

    6bc377d9d2648679fe1f5adbc496455d

  • SHA1

    1a907aceac02e598fd22403b0492b7704dbaaed2

  • SHA256

    dcd550058c9d0ddf7734ae149ca1f6d333e5873ab97af5453570d7d5e3deac55

  • SHA512

    a9ffa6550a7c476b3ba919cd2a03e5d8e25d5394ced6366048e123ec48b8f5df52233d1148cc132662647f9f09c93d62632ec73b4cb641095af48a4233ea69cf

  • SSDEEP

    3072:1Muck0YCUzDPZ2JezlZP56s8O2CZ07kl6z2p8zA8wxQkxIz+jk:e+QUr56s8O2ZO6zEzQkxrj

Score
10/10
ratcz30formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

cz30

Decoy

valeriepuma.com

rentyourbag.com

unglesbyessure.com

ahzmjy.site

taazdelights.online

conexoesnews.com

istprimeway.com

elwf4tlu.shop

661.support

fournaisehk.com

glechiu.xyz

2r2pv2.shop

902523.rip

bruggicapy.com

westmobileautodeatailers.online

muaad.co

gridxsens.com

victoronedesigns.com

tecexpressbr.com

crea4net.com

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dcd550058c9d0ddf7734ae149ca1f6d333e5873ab97af5453570d7d5e3deac55.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections