General

  • Target

    4348-139-0x0000000000400000-0x000000000042F000-memory.dmp

  • Size

    188KB

  • Sample

    220920-fsh8ssfehq

  • MD5

    67e20f98a70f2ccd73fb19989dfcbd0a

  • SHA1

    271907ca6928d0c3908dd5c63e05879efe114315

  • SHA256

    bc5a182eae1caa071c69d40f3c83840a7d22553761c00991a3536fc70b9fc299

  • SHA512

    5ea787812ae80fae24174b3e8fdc6e71b8c1e680ac98583feccf7771b2f96cefdf9ae99980d3b879c4dd48833f56cde218fe16edad1ed3491f83f326e079c8f2

  • SSDEEP

    3072:ygPepkr4tOGmA18h32HXC09JvwKQXnF6fOSCKPppNQx5o:P4oai23CyGKQXnF6fiwN

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

sde7

Decoy

lolfilmfestival.com

pousdaobosque.com

tangierfilm.com

valuedassist.com

qcrluxuryrentals.com

poc4cloudx.com

irizh.art

flowsever.com

serios-lifestyle.com

abc-diomain.com

bmwoemwarehouse.com

vivelamoda.com

thesycorax.online

goodjob129.com

hudyeanamaze.com

pabcp.com

millennialworkouts.com

gpcr-compound-library.com

rotyupin.xyz

hnkcsm.com

Targets

    • Target

      4348-139-0x0000000000400000-0x000000000042F000-memory.dmp

    • Size

      188KB

    • MD5

      67e20f98a70f2ccd73fb19989dfcbd0a

    • SHA1

      271907ca6928d0c3908dd5c63e05879efe114315

    • SHA256

      bc5a182eae1caa071c69d40f3c83840a7d22553761c00991a3536fc70b9fc299

    • SHA512

      5ea787812ae80fae24174b3e8fdc6e71b8c1e680ac98583feccf7771b2f96cefdf9ae99980d3b879c4dd48833f56cde218fe16edad1ed3491f83f326e079c8f2

    • SSDEEP

      3072:ygPepkr4tOGmA18h32HXC09JvwKQXnF6fOSCKPppNQx5o:P4oai23CyGKQXnF6fiwN

    Score
    1/10

MITRE ATT&CK Matrix

Tasks