General

  • Target

    2024-63-0x000000000041F190-mapping.dmp

  • Size

    369KB

  • MD5

    da175598eb41f24bc32e67d44034689a

  • SHA1

    b47dc37fe87970f6c60d4d81b9f01d729961c98f

  • SHA256

    c88681da1afb969515a7da6fada8741a938dfbf290df4c0e458bcd383acb5f5a

  • SHA512

    6a4efb9c243c13a1481ca3afd9af2023b4087de2358eae3cedf0641a0ccc2ff92dc5fe76d0a8e40dd3b50e95f3112f5fececbec25c92af23a13e89d5d009f4a4

  • SSDEEP

    6144:JOKxBF74W3TJavq3evDw8IOKxBF74W3TJavq3evDw8k:FxB93p3QwZxB93p3QwT

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

gg13

Decoy

sunnyislesbeachshul.com

odysseycigars.com

phootu.com

avitosan.com

professionaldefi.com

japanesefruits.com

altheasuiteterminal.com

darlindarcys.com

cremation-services-80353.com

thepropertyoutle.com

5gotodayy14.com

hyvr.info

thedoulanoella.com

mrtilefloors.com

playerdove.com

eaglexeye.beauty

plevas-meats.com

ababtours.com

intlbase.com

purplenet.win

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 2024-63-0x000000000041F190-mapping.dmp