General

  • Target

    428-68-0x000000000041F270-mapping.dmp

  • Size

    369KB

  • MD5

    bd6bcc68c1c6ddea5d0f184c4e2d472f

  • SHA1

    f7f84ab30f2b28d3605b66916241ddcb537a29b3

  • SHA256

    8e82bd6a7eca7f680678e6a5207b3e43b888029bbc53f3084f0d48fccc663949

  • SHA512

    fd61824c39b106435cb971142d766e180857c506b6ecd653bae944a755553ba13914b4e3fff02dcaa5630c3d6351dec385295cf8f196e8c2b0bda7cf2bdf360d

  • SSDEEP

    6144:k6Jncy7QvckumvVmc/+laMhUCR6Jncy7QvckumvVmc/+laMhUCy:5ncy7+Zjme8rSncy7+Zjme8ry

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

lsg6

Decoy

krishisudi.com

titantechsol.com

yourdeliveryteam.com

lovedecorstore.com

brtetsan.net

captainas007.com

porschegasolinesettlemetusa.com

oilspotgone.com

fclcollegelaw.xyz

cottastt.pro

xn--vb0b54ro0ioxlcrc6p.com

daidogei-point.com

theavalonsaysmoo.com

adhasahar.cloud

lovetivation.com

hipsandcures.com

writingaboutrealestate.com

atharvatrips.com

stair-lift-48402.com

thetrusttimes.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 428-68-0x000000000041F270-mapping.dmp