General

  • Target

    2024-64-0x000000000041F140-mapping.dmp

  • Size

    369KB

  • MD5

    7d3a330cdb83fcfc95aafa08dffda716

  • SHA1

    b7a2d7d236aa5326b2af4cd685c40cdced659e20

  • SHA256

    3a472f1ca73bd444d1bcd6b8c8f8ee877b74496a4ca5db4bfec9c41f4545534d

  • SHA512

    a411fb56df8668d22994a0ffbca1cc4b04bc5f995afeca153b7e38db57e65c6ddaf487d8014db132e98ccb8c8704be03e4d6080548e6d376aafb746673c387c9

  • SSDEEP

    6144:oZ7ITlntOgrq/w4gDFYZP2xl4C+QNsUNZ7ITlntOgrq/w4gDFYZP2xl4C+QNsUq:oZAntOZapAOcC+9UNZAntOZapAOcC+9Z

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g2e8

Decoy

sawtiger.com

titanblackcat.buzz

caernarfontown.net

aladdin.coffee

we-buy-houses-cash.net

wfzctag.top

bluehouse.computer

hi88pro.online

smtfhcl.com

claimitznow.xyz

wnshots.store

ky3165.com

reviewforus.xyz

sportsandluxurycars.online

swchx.com

babnetwork.xyz

careplatform.online

ventilationbremen.com

templecause.shop

id-serportesepong345464.shop

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 2024-64-0x000000000041F140-mapping.dmp