General

  • Target

    1324-64-0x000000000041F0F0-mapping.dmp

  • Size

    369KB

  • MD5

    83571979f9b8ba3007441b4ebda21185

  • SHA1

    5e91029e7409e66e430c30b7a11d2ed21d7683f4

  • SHA256

    51b10472c57e58d7c46585dbe29e8342d63c36b9073738e823b5d4d60b20989e

  • SHA512

    50bd0d1521151fa6fa1aac0d3bf3b2b0265cc3fbcea6882f8ad7236c5aea08f0445399be2b1721f90fdf614c4b69f85da65aebd77d6ab85d13c8a80ca7b7cd99

  • SSDEEP

    6144:yu/6DWvY60Qk8YwapKQUgrq4u/6DWvY60Qk8YwapKQUgrqR:YDWv77CUGDWv77CU9

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

p94a

Decoy

wishgrove.com

parqueveiculos.com

spiderwebs.online

chulkanadham.com

cdtuan.net

zxazm.com

payment6528832.xyz

fengtaiol.com

bffsmovie.com

aliceseagerfitness.com

garisluruskonsulindo.website

analytical-gutter.net

ahcq8.com

fenyoga.com

ecleptic.cat

conjurecrafts.com

aquaway.date

apenpokkenschoonmaakbedrijf.com

zgramr.top

boweknives.site

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1324-64-0x000000000041F0F0-mapping.dmp