General

  • Target

    964-71-0x000000000041F120-mapping.dmp

  • Size

    369KB

  • MD5

    4bfb5be42a663ccc00712ec6f223cdd8

  • SHA1

    739dc9b60c8ef5cd55d1f176048652755d4df8fd

  • SHA256

    32955895126091f0757ab04c21aa7e04c93a5eda4fa262407a92c1e93d8d8e76

  • SHA512

    14ce55003c301f2e2cb4c7a8155c846da30d1918c7d52b8c298598e8708b4dadb1895fc5680fda43800c29ba99f04925dabb7db95be747d60c3583e729d13d7f

  • SSDEEP

    6144:baJrtYTuaH/y942tkW1N6UrUtiplaaJrtYTuaH/y942tkW1N6UrUtiplw:qrtYxutbpUErrtYxutbpUEI

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

wuha

Decoy

chukou-ryugaku.com

naturatesori.com

qtg166.com

stroma-societal.com

869538.com

i-pays-service.online

crewquality.com

naturaliauruguay.com

robotics6.com

chelzywithaz.com

adlconstruccionesciviles.com

trouvetafibre.com

thefreefamily.com

familysafehidingplace.com

successkogyo.com

cindiwithaneyemd.com

ba4a9r7y5.com

marriagedivorcelawyers.com

dixo.site

tatbakkuruyemis.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 964-71-0x000000000041F120-mapping.dmp