General

  • Target

    4880-138-0x0000000000000000-mapping.dmp

  • Size

    373KB

  • MD5

    af3ffcf5f0fa5a5cd73e0ecf9b5ecc9c

  • SHA1

    7c92b2cc1baf1cdac7b87a19bf37d946fc67d92b

  • SHA256

    b9837d30d90b27a091cb2ccc45a8e293ff80ead28a08b1597fff23c14c64678b

  • SHA512

    392a09384e1f1d680cb5d6cd742a104e6d954fdc797ae84e604972f628ddbdd04cead3d03961be37a5ef15c34ac234c4894b60ec10bb05805b5fac2b7643aed3

  • SSDEEP

    6144:j1EY07+SahWDHq8Fqt1EY07+SahWDHq8Fq:qY0OUqm7Y0OUqm

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

se30

Decoy

uniquemallss.com

goldpro.info

votejoebaker.com

b4boy.com

byzlata.space

klinikkeluargapintar.com

hnhaiyue.com

joannahanlon.online

xn--ravn-7ob.com

vinesebieron.site

vupamedia.com

pointersrewardplus.com

millerlandscepe.net

thoitrangtuixach.com

qhhch.com

ukcarbonoffsetting.com

vazxlipnow.xyz

duposio.com

kaablam.com

kangsigi1.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 4880-138-0x0000000000000000-mapping.dmp