General

  • Target

    4ba400636c62026f1eee265a904f3c9da8a55dc1879da8563288616a08efa3cd

  • Size

    181KB

  • MD5

    1abdbeb2e11ad8ae5d2b091edf250240

  • SHA1

    6d6474a2aaf88064feda997ed131547740cf043c

  • SHA256

    4ba400636c62026f1eee265a904f3c9da8a55dc1879da8563288616a08efa3cd

  • SHA512

    0eaa776fb08a05102b7edea206b7d30aabe277f1164b56420d6d250df777e1223b62168317ca77db8253d4faa2b261d47105c3c2014577cc367c6c8150e4180f

  • SSDEEP

    3072:MWfqxEcElcY/7Bc3Uh5ztebFk2e7yM78f5LvPvn2X/dXLuFUF1kY/B0:dWExlSUrcbFk2e78xjP+XlX51kqB

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

fs83

Decoy

blastol.space

tomwalkerisfalco.com

us-sumatrraslimbellytonic.com

drywallandpaintingservice.com

vntapp.net

passportpages.site

at-mim.com

yeondagoods.com

teomanyildirim.com

paygame.site

senze.art

alhandco.com

9831bsej.xyz

traumatic.xyz

sos-soutien.com

thetechnolgy.live

washing-machine-46612.bond

marvsneakers.com

shequbaike.net

xc4f35fg4h35fg4h53.top

Signatures

  • Formbook family
  • Formbook payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ba400636c62026f1eee265a904f3c9da8a55dc1879da8563288616a08efa3cd
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections