Overview

overview

10

Static

static

10

bddecf330d...e2.exe

windows7-x64

1

bddecf330d...e2.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    bddecf330d5b3d2c09db0b26dc6367e2e71a2e0317cc65610cd1cca8809fd0e2.exe

  • Size

    181KB

  • MD5

    63143654685be4899ed0d2da5281ac08

  • SHA1

    7967c0585678836cdaf8f9fd744c42fb4c329736

  • SHA256

    bddecf330d5b3d2c09db0b26dc6367e2e71a2e0317cc65610cd1cca8809fd0e2

  • SHA512

    a09f7c6f7e5412ac70b98947a8d4acc4b309e69f03fa8dcea4e330856795eca5f54e497b93ad4fe9f4d7da6a3d85720cd45751a2e5341d24483cdf2110d4de7d

  • SSDEEP

    3072:FWfqxEcElcY/7Bc3Uh5ztebFk2e7yM78b5LvPvn2X/dXLuFUF1kY/B0:oWExlSUrcbFk2e78ljP+XlX51kqB

Score
10/10
ratfs83formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

fs83

Decoy

blastol.space

tomwalkerisfalco.com

us-sumatrraslimbellytonic.com

drywallandpaintingservice.com

vntapp.net

passportpages.site

at-mim.com

yeondagoods.com

teomanyildirim.com

paygame.site

senze.art

alhandco.com

9831bsej.xyz

traumatic.xyz

sos-soutien.com

thetechnolgy.live

washing-machine-46612.bond

marvsneakers.com

shequbaike.net

xc4f35fg4h35fg4h53.top

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bddecf330d5b3d2c09db0b26dc6367e2e71a2e0317cc65610cd1cca8809fd0e2.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections