General

  • Target

    948-70-0x000000000041F130-mapping.dmp

  • Size

    370KB

  • MD5

    7c1ad4950fb39f69c635342fa542565e

  • SHA1

    d2f8494ecbb223055d7219b341e3775f217daa4d

  • SHA256

    ead604abdc9243e1d7117f7d7f10a481dd87be743fa71410f3a2735c6423138a

  • SHA512

    e7bd38cd883939fbdcb19b166f44853fe1da5f787c261de6cecbc2420ec21283f654ed1ed255d7b418cfb3a514963230ae132b99ff7a67cb51f652bab1ea1d99

  • SSDEEP

    6144:rAozyaiUHgqqst7VpHvXnw3DAozyaiUHgqqst7VpHvXnw3b:rFyaiUHDlbHvnw3DFyaiUHDlbHvnw3b

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

et02

Decoy

floppa.art

mdesign.solutions

rus8.top

pleasantvilleenclave.com

schweitzervacation.rentals

yaolibeautyme.com

the20-sa.com

hifuel.info

meadowsweetwater.com

squamouscellcarcinoma.site

buildingblmt.com

saberfund.online

letyourstorytalk.com

neinagordon.com

turing.buzz

bouldercityhandyman.net

gethub.online

404wellesleycourt.com

squezpop.com

doublesranch.net

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 948-70-0x000000000041F130-mapping.dmp