General

  • Target

    1904-75-0x00000000000C0000-0x00000000000EF000-memory.dmp

  • Size

    188KB

  • MD5

    c412861e6d30aabf89c8a92677ae203d

  • SHA1

    0c570a802002b93e95c87f7bdb40ae6da4cc8df7

  • SHA256

    624acc198bb753faaec292fed6dfed9e55df508c179d7cfc8952816a360e5319

  • SHA512

    0c182da4248bcb74f3aa84ffe859aedc6760c0fa4c61b02261d060ef2004d9b1544a456de75061f13abff34e25f63c9602605a35214b83ab6f01be3940deec1a

  • SSDEEP

    3072:d5MrbZdkM78Qr6yg53nYkOgMUq/A4f4yYLN75ZmZP2xl4COdQPVsUB:doZ7ITlntOgrq/A4gDFYZP2xl4C+QNsU

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g2e8

Decoy

sawtiger.com

titanblackcat.buzz

caernarfontown.net

aladdin.coffee

we-buy-houses-cash.net

wfzctag.top

bluehouse.computer

hi88pro.online

smtfhcl.com

claimitznow.xyz

wnshots.store

ky3165.com

reviewforus.xyz

sportsandluxurycars.online

swchx.com

babnetwork.xyz

careplatform.online

ventilationbremen.com

templecause.shop

id-serportesepong345464.shop

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1904-75-0x00000000000C0000-0x00000000000EF000-memory.dmp