General

  • Target

    2040-76-0x000000000041F100-mapping.dmp

  • Size

    369KB

  • MD5

    621915571b2cde795156a09cfe8ff03d

  • SHA1

    af6a05d21ab3f0676e8681eb6b5b8356f81f0b16

  • SHA256

    0e24c48b3865e1bb3a25c7053f83ec65aa7a0cae7cbf9d62a4e594b81be5970d

  • SHA512

    8be8e7885163c8ec9836ad5853e9fa09c5a36adc46ce3696a07c7c6bffd8f78fc9238b347b7600b613d4da943460a82fc337014076f5a9689f8afb1f03fda9f4

  • SSDEEP

    6144:yp0u54Vq/VqUGXWyqm9aO000x2hp0u54Vq/VqUGXWyqm9aO000x2m:ad54sZ7OaOEid54sZ7OaOEj

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

n25n

Decoy

counterblast-stately.net

anhuiluan.xyz

searchscrealestate.com

ipfsvault.com

q2307.com

doingout.com

empyreanaudio.com

defectivehomes.info

intlword.online

costumeking.kiwi

backachersalpacas.com

kellysheros.directory

mtbscecure.net

realestateprogression.com

shengmimama.com

sdftsb.com

ghafouli165.online

effexorbuy.top

flipgrill.store

nevadatechhelp.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 2040-76-0x000000000041F100-mapping.dmp