General

  • Target

    1640-68-0x000000000041F0F0-mapping.dmp

  • Size

    369KB

  • MD5

    08efe053a2f9bed23a28dee31d1544be

  • SHA1

    f951527afdaf3e359741ee9736b8e995c21cab93

  • SHA256

    3f437e2a3f97baed0b63821eabcafce31bad80603360823ab22ffe788981ba7d

  • SHA512

    87658d4d746112c2b5561e6d6403172940f39a3a7a9554c2298ae4abfe65e2a3e0c2df182fa59621c879376b27f43753596c82f22008cb4b332281121d8d9936

  • SSDEEP

    6144:xuvc+IwjaEJUQPr04drSKMiYsuvc+IwjaEJUQPr04drSKMiYk:J+yErtdrSKnYI+yErtdrSKnYk

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

dy47

Decoy

valeloaiza.com

nxmdta.quest

yennft.com

techwithnova.com

newssmart.xyz

devopstp.com

trophies3d.co.uk

helpagencia.online

fineclocksandsoaps.com

universerealtor.website

hyriver.com

xishangtao.com

getyourhostingnow.com

one-poker.com

ry-cw.com

colaye.us

russellbanx.com

rennentedieeinzige.uk

heliconiaparadise.site

234sportsagency.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1640-68-0x000000000041F0F0-mapping.dmp