General

  • Target

    1100-66-0x000000000041F150-mapping.dmp

  • Size

    369KB

  • MD5

    f8b0b0ff8597b39a735be74df6ac4c65

  • SHA1

    af9ba2372013e7253db56db44f2c0ccea83f8dbc

  • SHA256

    2a09695f118a4bf19105252422e16fcf0ce5240bc9ff2e3604a1e4899aa715f8

  • SHA512

    bc1b804f3b1740488d46b7a7a8cc492192eff6a77a4a8b839cf21c8e0804143c88a342d9e66f6656fd09d3ddc47d4c720e47cd57a4f1af059e94f0a805c48724

  • SSDEEP

    6144:U9Kc412gsav3lgRZkq967NL3P9Kc412gsav3lgRZkq967NL3O:hc4xHmbkusNwc4xHmbkusNq

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

jr22

Decoy

941zhe.com

lunarportal.space

xn--osmaniyeiek-t9ab.online

trejoscar.com

nrnursery.com

quizcannot.cfd

seedstockersthailand.com

watsonwindow.com

wjfholdings.com

weziclondon.com

naruot.xyz

yeji.plus

classicmenstore.com

oharatravel.com

therapyplankits.com

keviegreshonpt.com

qdlyner.com

seithupaarungal.com

casinorates.online

8ug4as.icu

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1100-66-0x000000000041F150-mapping.dmp