Overview

overview

10

Static

static

10

6c57771cda...78.exe

windows7-x64

1

6c57771cda...78.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c57771cda82415d8e0f6492203eff52a3fb36ea966fad9fc4e7fb4d0de7e378.exe

  • Size

    181KB

  • MD5

    a1737d3fdf5e332072180df23d2a548e

  • SHA1

    2b4f60d5f23f1affbf7187550fcb00476b89876e

  • SHA256

    6c57771cda82415d8e0f6492203eff52a3fb36ea966fad9fc4e7fb4d0de7e378

  • SHA512

    5f5a5c3c1814a921a04b95e3966558c32bc693fe502a115642defa45001bb6ba2d5ba8ee206d68308b64c2a2a8902eeef85f7265b018306817ea488c340dfd5f

  • SSDEEP

    3072:qWfqxEcElcY/7Bc3Uh5ztebFk2e7yM7895LvPvn2X/dXLuFUF1kY/B0:vWExlSUrcbFk2e783jP+XlX51kqB

Score
10/10
ratfs83formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

fs83

Decoy

blastol.space

tomwalkerisfalco.com

us-sumatrraslimbellytonic.com

drywallandpaintingservice.com

vntapp.net

passportpages.site

at-mim.com

yeondagoods.com

teomanyildirim.com

paygame.site

senze.art

alhandco.com

9831bsej.xyz

traumatic.xyz

sos-soutien.com

thetechnolgy.live

washing-machine-46612.bond

marvsneakers.com

shequbaike.net

xc4f35fg4h35fg4h53.top

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c57771cda82415d8e0f6492203eff52a3fb36ea966fad9fc4e7fb4d0de7e378.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections