General

  • Target

    1052-64-0x000000000041F120-mapping.dmp

  • Size

    369KB

  • MD5

    5281e47be656aeee2942ba7d1392331b

  • SHA1

    9cbce77eedd13dc7eee28fc6d0305b52de873a6d

  • SHA256

    40e7c7699522aac2010f6af7fe6cf510517338122aaea75bf7661e6168ad0270

  • SHA512

    fa86511c3f3a32291415f5a9184c3e8368dbf154cdd86a85b58662146f2f35c133a543f5d0cc9c336851e7dc4906a30e79945fb44c4fd24f528cdad6c8ee4726

  • SSDEEP

    6144:rc0DUiq7du3SKz7rZM4B3G5QcWGnxic0DUiq7du3SKz7rZM4B3G5QcWGnxe:rcOlq7du3RzxkQcWGxicOlq7du3RzxkM

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g1z0

Decoy

americannerddaily.com

toespins.com

monicacandray.art

order9365.info

tocorap.com

artibirfestival.xyz

somopepe.africa

tallerfloral.com

designmytattoos.site

sokusup.com

oldgringoboots.store

akhilanjali.com

eutpuale.work

iconsuphanburi.com

idappiesupport.us

finprom.tech

standuppaddle.schule

traplineleatherworks.com

onestepahead.live

offwhitesales-it.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1052-64-0x000000000041F120-mapping.dmp