General

  • Target

    1372-147-0x0000000000900000-0x000000000092F000-memory.dmp

  • Size

    188KB

  • MD5

    59f5af8d82dcfa856b82604441a7fec1

  • SHA1

    279ca22a94458e66665b333e5da22a5e49b711ab

  • SHA256

    1c98b9763e18b0ccaac0da388dd4d6f0df43dcd513a577c7008059036cfaef58

  • SHA512

    5c6a3f07d9d8fdf8f8dba5c906c3913558b0715bac4aa4a7fe1080082411757b34cf5417945802a7e3b3615536a4fc0f1761115efb03b8a78de6aa82cc86c6cb

  • SSDEEP

    3072:LkJokjrFdaj33djTqO/8JqaIvxgEsM+W8iMoGp0eF+oYM:8KHdPqOUJqaIvafFiVGp0eDV

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

en27

Decoy

plxfgj.com

lesmarines.online

vacationsme.us

275by.com

bigrodoc.online

xjvcwszbwzd.top

redplanetinc.com

vinyuup.xyz

newbrotherprove.top

219961.com

ompelimosormustin.info

againstaffiliatemarketing.com

beautyrealmm.com

goldentickethomes.com

topfunnel.today

peacsolutoins.com

sztzywygl.com

allfishingtips.com

rcgerlnterac.com

tasweeneloragahar.info

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1372-147-0x0000000000900000-0x000000000092F000-memory.dmp