General

  • Target

    916-64-0x000000000041F100-mapping.dmp

  • Size

    369KB

  • MD5

    ce202d642305d81a835715172efe44a7

  • SHA1

    35a1a628d6a8f7a48f53b736c30e1a1ba3845ec5

  • SHA256

    ef68a796218304bfad2ffe30dec825dde4bf789205814d4653862bcf08e27ef7

  • SHA512

    9fc7f3bec152c0952baf13b7f4a193f8aac24bb0588805bb3a411f07a1c5384e9a944bbd5d310c04fabb190c05f5ae3cf6198282e35b9f5c1e028d0139c9558b

  • SSDEEP

    6144:Qp3bzDLX1qRX8euMf6EbDXD3p3bzDLX1qRX8euMf6EbDXD2:8TLXMv/fLFTLXMv/fLq

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g28p

Decoy

whhmgs.asia

wellmedcaredirect.net

beggarded.com

wtpjiv.site

todo-celulares.com

parkitny.net

43345.top

pro-genie.com

cwdxz.com

cbc-inc.xyz

healthspots.net

rulil.top

pyramidaudit.solutions

k8sb15.live

hempaware.report

usclink.life

stayefs.net

05262.top

shop-izakaya-jin.com

iccworldcupnews.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 916-64-0x000000000041F100-mapping.dmp