General

  • Target

    1500-64-0x000000000041F0F0-mapping.dmp

  • Size

    369KB

  • MD5

    8f2a8e7e41efdec31b45e8ac5e8c7d13

  • SHA1

    846622bfa9652509041d201ed37b7153acb29aa8

  • SHA256

    9304a93c898f73aa9a731f9cc48e8b7d131cd9e706669696344e4523770dad9d

  • SHA512

    0e8627965188ca113221c1676046f513d228ea2f30578f11d83f048eaebb05ecaaa6f2c61de22847f91964eeb1730dd693ab1c0ac396b56250070aa452b1e59b

  • SSDEEP

    6144:aV8GLu4VtKuHEm98vrFjUpV8GLu4VtKuHEm98vrFjUm:uu4V0fv5Ahu4V0fv5Am

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g2si

Decoy

joshhawleyisabitch.com

clubterpellm.com

informacoesedicas.online

luxury-watches-22868.com

dttqy.cfd

shreevedcity.com

youtubemore.com

oimetya.xyz

capiltd.com

jifeihu.xyz

americapitalcreditunion.com

bliinspections.com

bmtiyu.online

informatoetutelato.com

certifiedbuilderoffunnels.com

britanniatimes.com

mvloqpcuht-7418.com

ryouri-zyouzu.com

xarrel.com

laptoplike.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1500-64-0x000000000041F0F0-mapping.dmp