General

  • Target

    1480-78-0x0000000000080000-0x00000000000AF000-memory.dmp

  • Size

    188KB

  • MD5

    005d9667b8746f98b2cf01993c442324

  • SHA1

    39962a949070e920d1108d0af04cedf33969e25f

  • SHA256

    b4fb4b5346540a03cc343c1bf4c773e915cd0b6ed54ee58db8fff6823d4be340

  • SHA512

    5411dd97cc232d260b540e75b27fe1d0f56f26e5ce2cd830cd90fc0fd11e83a28e9081564d6df635fbceef0fdb7e5d7dcd168bb9cbb83e2919096fbe7423802b

  • SSDEEP

    3072:ayQVd1kaHVhE4RN3vqXFamKhepfUW4jpVrw62V3Huz:bgzBv49KhepOjpJ6xuz

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

oy10

Decoy

wzwanju.com

vaultnutrition.info

propane-gallon.site

balkanmetin2.com

costa-del-sol.email

kayodeokikiolu.com

singlesshirts.com

nearestfoods.com

trenddetail.com

yihaimaidan.net

dfdr3r.site

tuitionmatters.co.uk

benglas.online

coloraja.xyz

tianzicheng.com

lamkt.com

dileca.com

6698856.com

vishi.store

ablehair.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1480-78-0x0000000000080000-0x00000000000AF000-memory.dmp