Formbook IOC

Main object - "swift copy.exe"
sha256
4056b573c4935ce3d721fa7e1a75ed9bd5e442d32ccc96f418f03652f6035ec4
sha1
380fb195704aca2192bee9b54f094e00aa91c2c4
md5
3a0a924f2c80f94e1a65198a892ccc4a
DNS requests
domain
www.jeycop.com
domain
www.scubaarabia.com
domain
www.journeystudentcamp.com
domain
www.niger-online.com
domain
www.simplegreenhabits.net
domain
www.essayontime.science
domain
www.frankandmidori.com
domain
www.525pwz.info
domain
www.check-or-wreck.com
domain
www.purdomlnc.com
Connections
ip
157.52.217.116
ip
199.192.26.3
ip
199.34.228.67
ip
69.89.31.241
HTTP/HTTPS requests
url
http://www.journeystudentcamp.com/ku/?0pq=8sW+z2ARIeNKu321KtttNkkdSWxA3NrsFtR2UWI5X+vHdZfG97CmFjg/a2dkccb6iQwpLQ==&00=KxIhEPixN&sql=1
url
http://www.jeycop.com/ku/?0pq=xuQf/7bSMj7SST3LWo7Rq5Yr/c7gI+l8po3Ihg/c7x8hEFLzYy6tRHO9khyXfbrQziGEhQ==&00=KxIhEPixN
url
http://www.journeystudentcamp.com/ku/
url
http://www.purdomlnc.com/ku/
url
http://www.purdomlnc.com/ku/?0pq=Fx/MDFAPREzN6RCQ2JqX5QhGilkORrK4+DUoYG+nWAYYnMZXiaJSvBn+qKBm05YLYaIS/A==&00=KxIhEPixN&sql=1
url
http://www.525pwz.info/ku/?0pq=hNn8ZcAZkCDjNKnWfDtH2bsrhyRJerbq5xOGEs6TJwWlI3mkg7UbcJnWVcdyKbSnwFXhMw==&00=KxIhEPixN&sql=1
url
http://www.525pwz.info/ku/


https://app.any.run/tasks/255788e9-cd32-4705-abd9-de0f98d8cd6c