General

  • Target

    828-145-0x00000000010A0000-0x00000000010CF000-memory.dmp

  • Size

    188KB

  • MD5

    fb0b0cc6f1559c091c210815eb5c0768

  • SHA1

    8b5b2d49e3014412bea50b87e2de8c426b536c5b

  • SHA256

    728b45e51f2a5fd081d115395e4ab56f4e6ff99410a73f609815c76be8f42211

  • SHA512

    1dedba265c477715b0da4f5021a868342ce5351a3f13c897c92e743a2ceba0883d1c1dc0a4d2c3d0e03bfd0aac717d8f91d9dec84cf38adfcaeee4ff98288d9a

  • SSDEEP

    3072:0I2MvBkKF1wvzJ93ikcMZ9Xa2izNU2sMdEJjuSOVqRgcanfv1tfGHo06nBIw:FmxilMZta2izm2VVEZGGI067

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

wh23

Decoy

ow9vyvfee.com

alvis.one

mutantgobz.claims

plynofon.com

southofkingst.store

nuvidamedspa.com

coffeeforyou56.com

opaletechevents.com

momobar.life

abcmousu.com

learnicd-11.com

tipokin.xyz

kahvezevki.com

suratdimond.com

oldartists.best

infoepic.info

mattresslabo.com

skarlmotors.com

cl9319x.xyz

med49app.net

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 828-145-0x00000000010A0000-0x00000000010CF000-memory.dmp