General

  • Target

    1304-68-0x000000000041F0B0-mapping.dmp

  • Size

    369KB

  • MD5

    e40df6802ad8046ae162a16eef2130f1

  • SHA1

    30aaff9ccbbb868243e07de4bf3c030f3fe55472

  • SHA256

    b47326ebd40f70e78c3d68763e3d313f9511aaa8574ab7a3863719fd994fa914

  • SHA512

    22314fcb10aa246ba4fb0a2760f8e9a8befe4a136a97726710e2ea0aed99322cb5c6216106b057b0ed439779cae60247d15751b68981a39cf0dff427a9f4dc96

  • SSDEEP

    6144:jODb2wV62lFTOyEQ9bRfSuSlrMcODb2wV62lFTOyEQ9bRfSuSlrMa:ab2w8ScuSm3b2w8ScuSma

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

t39h

Decoy

a101im2.com

nowherehome.city

shanglinrunair.com

yingyandiaocha88.com

ke77fu.top

vnitrni-bezpecnost.pro

feednigerianow.tech

788851.xyz

tristarnetwork.com

slsbuildingproducts.co.uk

stop-dog-diarrhea.site

place-dessert.store

tppstore.xyz

inapr.com

girlsmaza.com

mjbplumbers.co.uk

usmanagementcorp.com

any-markets.pro

vaynhanh.tech

4aged.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1304-68-0x000000000041F0B0-mapping.dmp