General

  • Target

    1292-69-0x000000000041F120-mapping.dmp

  • Size

    370KB

  • MD5

    3f69d1aeaa5eb1f794452957ddb359b9

  • SHA1

    1a4934fc44904ec5ef2a6265a2b97d2398714cc2

  • SHA256

    6205f5ac8986f7c61cdb4616ae431b29491912cd8d23c86693109780ae18a3e1

  • SHA512

    6e0c839a06c040f46d8d325d06df18223959b6a5c14e07349335feb6888f5de24f91108a6acb49716371407e22019b67e961d5940bee644a0f5ecfc466a9cc0e

  • SSDEEP

    6144:bUEYyfuPeKXuUANFTTZbNiUEYyfuPeKXuUANFTTZbNM:PYymP1IFpCYymP1IFpC

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

je14

Decoy

innervisionbuildings.com

theenergysocialite.com

565548.com

panghr.com

onlyonesolutions.com

stjohnzone6.com

cnotes.rest

helfeb.online

xixi-s-inc.club

easilyentered.com

theshopx.store

mrclean-ac.com

miamibeachwateradventures.com

jpearce.co.uk

seseragi-bunkou.com

minimaddie.com

commbank-help-849c3.com

segohandelsonderneming.com

namthanhreal.com

fototerapi.online

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1292-69-0x000000000041F120-mapping.dmp