General

  • Target

    1972-64-0x000000000041F140-mapping.dmp

  • Size

    369KB

  • MD5

    5a9f91cc7ef941ad696cd1494e18db9e

  • SHA1

    5d85ee100275b02b1fd16340a4c0fc94c009335d

  • SHA256

    3c0a2f4e2031fead8ab687e57ff55109d012dc3dd3cce27946a16e164e9484b2

  • SHA512

    48d6b496ff2ee12becc0f7d63be4506537a4cecd406b3df1a116fcaa8df2438c863fd4c7e0a15faf60e821fc84bd7c46de2e0a27ea0cfea08096e0b76eac0acf

  • SSDEEP

    6144:RpgftiLFqq6KNus9S4xsgsHFpgftiLFqq6KNus9S4xsgsHH:RpciL8KZig0FpciL8KZig0H

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

v18s

Decoy

elixirblog.com

foodweightedblanket.com

jillianjenna.com

dappsudhampur.com

pro-mesh.com

xn--wnu.xyz

americaniberians.com

simosimo09.com

abonnementenpause044.info

rentlakehome.com

orbeltheloanofficer.com

kuaileshen.com

ijoslca.com

honorsongs.net

templew.xyz

shmhz.com

airboat-alligator.site

lanearto.com

upscalekitchenbath.com

kumamoto0930.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1972-64-0x000000000041F140-mapping.dmp