General

  • Target

    760-99-0x00000000000D0000-0x00000000000FC000-memory.dmp

  • Size

    176KB

  • MD5

    27dba86f90aac8f911f3594b512dabfb

  • SHA1

    1ec9752a5aa6fa7836d5d130edc69ba8f4929894

  • SHA256

    20625cfed62c52ab0c0fbb9cc73400839c996574625f1aff5b6a613b00c97841

  • SHA512

    f506a9faee4dcf5d76ccd7307bd71867d9b8cc998b322f3fc41342bc1643054bcb6a2dc6d09ffbd5cbb456af50ac1dd7c7dd5e2dbb69bf23f7bb08bea387aee0

  • SSDEEP

    3072:reTfGm2AoRXWTJdpTcn39UcX/GEicW67ghQRP:rW9WRcdho3ScX/GEicW6khQF

Malware Config

Extracted

Family

formbook

Campaign

u8ow

Decoy

uzhDDUNgg10rOh8rkUMGYiLuNnRWl9gwMQ==

bfkA4IUaSgYi7IA=

ezX5yHeR21O3h2RCgQ==

x3E4ntHeLMGQm0kdTi6PJtjOVS6Em8UaKA==

xJuAYwcZLAfqrVazWjvkirgFxDSf

qrGugLdannLYegX5dCtFMA==

i61nMddueAYi7IA=

RoNMKNhtdDWpeiYoaB37TPiHTLo=

RFj3UHHrDtAktSZhYku36opnsaMbNA==

lx0g+6RPl4jwwNPRPuTD

MyEQ4oGk6vXrMM4V

0IVWH0rfKe1J4nn6J9XB

SYVlN3Zrnq2OaWpDiQ==

fNa0jy3P8KQK25rpmwqd0t8=

UZuSZpW+9ffX9KXzmgqd0t8=

Vxf85YCWvYNZjkcDdCtFMA==

0gG1EzLP7/DrMM4V

WExRGVAEE6YS5tJkTxMhR636+A==

6Tv7U4QdURt1KUI+gw==

ooR7RXgsXPtaEutnaQ3efjIXmfJePavzIA==

Signatures

  • Formbook family
  • Xloader family
  • Xloader payload 1 IoCs

Files

  • 760-99-0x00000000000D0000-0x00000000000FC000-memory.dmp