Overview

overview

10

Static

static

10

bin-crypted.exe

windows10-2004-x64

10

bin-crypted.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    EnquiryListPDF.r00

  • Size

    147KB

  • MD5

    101dd3db35f5f252f303ace9e87b9e11

  • SHA1

    62e5adaf6ad6a353e6d1d1daf0c47a234b2ef28d

  • SHA256

    4b86b60d5c3edb57a0007d881b77b527606a771264ffffff50d2787da1ba22a7

  • SHA512

    b34d0ce9d6abdec826969aa2fe09ec3569463f4db259cab45aea70662b644360a5420caa9a4b05e61d9316b632419d649173ca21a8ab4f14647926711910e82e

  • SSDEEP

    3072:Q/vgKbK7OUbuT8kMomezarrQGWr23U662nq3SIxEacuBJBKuZ:Q/f5suT8kMiWPQGWQULH3SaESBrZ

Score
10/10
ratjc27formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

jc27

Decoy

uymygel.xyz

aregiver-services-test01.sbs

ouyin67gh.vip

lobalz.top

cl1ic4.pro

mconotc.top

hmm365.cfd

olonam.shop

ionnel.shop

ntroductorypage.info

einopumpify.net

hsnac.xyz

rameny.net

itness-apps1-s2025.sbs

nshulthakurdev.pro

iveawaywin.online

setobe.info

ostury.shop

5r03a.sbs

yota-blog.net

Signatures

  • Formbook family
    formbook
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • EnquiryListPDF.r00
    .rar
  • bin-crypted.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections