Overview

overview

10

Static

static

10

f29d2cfdac...c6.exe

windows7-x64

1

f29d2cfdac...c6.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f29d2cfdac3aeb03ef2101dcc5281346e5b752d6f65e99d5e29f8fff0a16c0c6

  • Size

    188KB

  • Sample

    241221-vyj5lsvjfp

  • MD5

    cd18b128e0eaacb61ca02bcbb2d60d9c

  • SHA1

    cf3e7c3af914dece8b460f1cdbbf6a8b7f0f1955

  • SHA256

    f29d2cfdac3aeb03ef2101dcc5281346e5b752d6f65e99d5e29f8fff0a16c0c6

  • SHA512

    c65cb0d6fb59bbe46ee2e5043bb0b5439cbcd7c6d41998fcf15b87bc9f7489d95b916cbeb2d0dbd051fbfccad582411cc1c5aed067eae14b5474469e3116761d

  • SSDEEP

    3072:2OfIE1S0VGls3+RjdN5XUqqnUdX0xM0hRaRVNotRh7x+j8dI:zYi+NdXkqqnUdX0zKuRhEjs

Score
10/10
formbookzs84discoveryrat

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

zs84

Decoy

kubet66x.online

webtergabuak.com

searlont.top

mariammacghey.xyz

iotcs.dev

soulserenity.online

coop-santarita.com

xn--emagreacomprazer-hpb.site

suistake.xyz

oanavasiu.com

cornerstonepartners.us

rexgrocery.store

4walls.store

kinako105.com

ednateixeirabrand.com

6735468723.online

erin-watson.com

merop.online

evidentexchange.com

1wxba.top

Targets

    • Target

      f29d2cfdac3aeb03ef2101dcc5281346e5b752d6f65e99d5e29f8fff0a16c0c6

    • Size

      188KB

    • MD5

      cd18b128e0eaacb61ca02bcbb2d60d9c

    • SHA1

      cf3e7c3af914dece8b460f1cdbbf6a8b7f0f1955

    • SHA256

      f29d2cfdac3aeb03ef2101dcc5281346e5b752d6f65e99d5e29f8fff0a16c0c6

    • SHA512

      c65cb0d6fb59bbe46ee2e5043bb0b5439cbcd7c6d41998fcf15b87bc9f7489d95b916cbeb2d0dbd051fbfccad582411cc1c5aed067eae14b5474469e3116761d

    • SSDEEP

      3072:2OfIE1S0VGls3+RjdN5XUqqnUdX0xM0hRaRVNotRh7x+j8dI:zYi+NdXkqqnUdX0zKuRhEjs

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks