Overview

overview

10

Static

static

10

50071a2c2b...ea.exe

windows7-x64

1

50071a2c2b...ea.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    50071a2c2b1803c4403fc4a972061628288a966a4d9fc2212fbd75c045dbcaea

  • Size

    181KB

  • MD5

    e74d6618fe24c296d46e47aac47fb95e

  • SHA1

    f046c85d0ed04af059d3bf801d2bb84061e960ed

  • SHA256

    50071a2c2b1803c4403fc4a972061628288a966a4d9fc2212fbd75c045dbcaea

  • SHA512

    1737be0086abbfb85e09a13795a7e4470ae88039f4d18bd0c16231efbb5fab8eda84fe940a2d9faa351f83f4e77a9bd0a40b2210a7d8ca4fac46dd868c5c1716

  • SSDEEP

    3072:ZWfqxEcElcY/7Bc3Uh5ztebFk2e7yM78d5LvPvn2X/dXLuFUF1kY/B0:kWExlSUrcbFk2e78XjP+XlX51kqB

Score
10/10
ratfs83formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

fs83

Decoy

blastol.space

tomwalkerisfalco.com

us-sumatrraslimbellytonic.com

drywallandpaintingservice.com

vntapp.net

passportpages.site

at-mim.com

yeondagoods.com

teomanyildirim.com

paygame.site

senze.art

alhandco.com

9831bsej.xyz

traumatic.xyz

sos-soutien.com

thetechnolgy.live

washing-machine-46612.bond

marvsneakers.com

shequbaike.net

xc4f35fg4h35fg4h53.top

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 50071a2c2b1803c4403fc4a972061628288a966a4d9fc2212fbd75c045dbcaea
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections