General

  • Target

    1396-64-0x000000000041F100-mapping.dmp

  • Size

    369KB

  • MD5

    a01a3748d424bf5087d41ba99785267a

  • SHA1

    8683fb6bc669a0d77942b6ec912b6514c832823c

  • SHA256

    499a476b39b80bafc0d7d2537486564f5909290dad5b6670e559dd523a2da2de

  • SHA512

    82cea9778b520d0cc72796426b6407d255973f70f954d19d2a0b0a6ab9a3612ed6ac484d605dbda880983b8f6df656ee863c8a0f492d091aee1d0c289f062ec3

  • SSDEEP

    6144:Mp3bzDLX1qRX8euMf6EbDXD3p3bzDLX1qRX8euMf6EbDXD2:ITLXMv/fLFTLXMv/fLq

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g28p

Decoy

whhmgs.asia

wellmedcaredirect.net

beggarded.com

wtpjiv.site

todo-celulares.com

parkitny.net

43345.top

pro-genie.com

cwdxz.com

cbc-inc.xyz

healthspots.net

rulil.top

pyramidaudit.solutions

k8sb15.live

hempaware.report

usclink.life

stayefs.net

05262.top

shop-izakaya-jin.com

iccworldcupnews.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1396-64-0x000000000041F100-mapping.dmp