General

  • Target

    7b9499787c7e30b1ca9bea2d81f82d216022ac1334d897f1f683ba9e6ecd8898

  • Size

    188KB

  • MD5

    0f1b20da17082bd72b531435fe5e7813

  • SHA1

    628246fdcf0ee72be5013c47c6e50015a627d8ef

  • SHA256

    7b9499787c7e30b1ca9bea2d81f82d216022ac1334d897f1f683ba9e6ecd8898

  • SHA512

    b9772be7e19851bd5da02be979217d34600e2fc52a83b0a87f3db6a1512a325c772c1ef1a8d295bb86fe48bc62c450336ffc4c30f6f5911c1aeef46942122c53

  • SSDEEP

    3072:hIkRHkv0ghUeid34V+k3M6S2+RvdQN5jZvvgPBKSE2rx4YP0c1:9VR4096S2+tdQNPM8SE2rxT8Q

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

as04

Decoy

topnewsworld.shop

00050610.xyz

untha.xyz

104225.com

otakuplay.net

jjupunde.xyz

instagbot.xyz

capitalepalermo.cloud

jgpyhiohe7o58lq.buzz

25761650.com

kschulzphotographs.com

mollysit.com

onomanjur.com

elektro-vlasic.com

conteudoexclusivo.website

elberra.com

savvysaleshop.com

rratu.site

janinefourstate.net

vitalonlineyoga.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7b9499787c7e30b1ca9bea2d81f82d216022ac1334d897f1f683ba9e6ecd8898
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections