General

  • Target

    662454b411bcab1756c0be7a2d7ffd0587d9a3347b3f9235fc292132ede44752

  • Size

    188KB

  • MD5

    c10e79ef1a4b3a63580a43cf521ffe57

  • SHA1

    b46247399f5c0af2b938d089b554ff84bb157e8a

  • SHA256

    662454b411bcab1756c0be7a2d7ffd0587d9a3347b3f9235fc292132ede44752

  • SHA512

    1e7e4c19807184cb44f5ffdce38094a648c80c3520322cf967e0c6f527546256bd0b43feb12915cca01629ebe3d9824f3a96b92acdd8f27f51532fc37e84a645

  • SSDEEP

    3072:IfuEm9uOrI0m3tHON/vaB5YeGOOW4yJGG6LAaW/dIgF/:t60QtuNanrGOPrJv

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

sn72

Decoy

auntieannasboutique.com

bmvelectra.com

brightertaxes.com

jumpexit.com

drakorssi.com

greewino.com

fupinge.com

design-rostov61.ru

4455k.net

findmentalwealth.com

echadholisticbar.com

whrdyim.com

jabyrne.co.uk

entalem.com

efeflaunch.buzz

asty728.com

everydaysociallab.com

farmally.africa

2459731.com

iberostargrandsalome.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 662454b411bcab1756c0be7a2d7ffd0587d9a3347b3f9235fc292132ede44752
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections