General

  • Target

    1988-64-0x000000000041F140-mapping.dmp

  • Size

    369KB

  • MD5

    db03f431035e2105ed9ec0f8ffdd1101

  • SHA1

    56b4a5f5fba05dfa23350fd46c1c1c867e14ec7f

  • SHA256

    520dfe2ecbe366375cfce42e90c3e07b8841b8331f3d18d1db1f45cbeedd7956

  • SHA512

    d217558e19992dff7bb63b9f604b8168036fd410cdd3bcecccc549d01fc7498a94b9f95f3bf547b1fdd0619ac629f02c809163bd8cb9d372bfc6a679e6f38dcd

  • SSDEEP

    6144:EZ7ITlntOgrq/w4gDFYZP2xl4C+QNsUNZ7ITlntOgrq/w4gDFYZP2xl4C+QNsUq:EZAntOZapAOcC+9UNZAntOZapAOcC+9Z

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g2e8

Decoy

sawtiger.com

titanblackcat.buzz

caernarfontown.net

aladdin.coffee

we-buy-houses-cash.net

wfzctag.top

bluehouse.computer

hi88pro.online

smtfhcl.com

claimitznow.xyz

wnshots.store

ky3165.com

reviewforus.xyz

sportsandluxurycars.online

swchx.com

babnetwork.xyz

careplatform.online

ventilationbremen.com

templecause.shop

id-serportesepong345464.shop

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1988-64-0x000000000041F140-mapping.dmp