Overview

overview

10

Static

static

10

781a48184e...04.exe

windows7-x64

1

781a48184e...04.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    781a48184e92d5dc45d97deb22c95f8846ae050ccef9f8a4fdf5638a13319f04

  • Size

    181KB

  • MD5

    da0538358fbf5bd2bf41eb9c7fe84cf6

  • SHA1

    75751f324c4d2f7e227b7412821feb17903ba501

  • SHA256

    781a48184e92d5dc45d97deb22c95f8846ae050ccef9f8a4fdf5638a13319f04

  • SHA512

    12ff9422fe9aa4847ac8df40d8a63696876df7b9412f829f5b9d0a892cb5ff38f0ec4ba6080d65162bedcb2e0d9442d5948d723da2572a7b110b09a3fb05cd5f

  • SSDEEP

    3072:3WfqxEcElcY/7Bc3Uh5ztebFk2e7yM78i5LvPvn2X/dXLuFUF1kY/B0:GWExlSUrcbFk2e78AjP+XlX51kqB

Score
10/10
ratfs83formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

fs83

Decoy

blastol.space

tomwalkerisfalco.com

us-sumatrraslimbellytonic.com

drywallandpaintingservice.com

vntapp.net

passportpages.site

at-mim.com

yeondagoods.com

teomanyildirim.com

paygame.site

senze.art

alhandco.com

9831bsej.xyz

traumatic.xyz

sos-soutien.com

thetechnolgy.live

washing-machine-46612.bond

marvsneakers.com

shequbaike.net

xc4f35fg4h35fg4h53.top

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 781a48184e92d5dc45d97deb22c95f8846ae050ccef9f8a4fdf5638a13319f04
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections