General

  • Target

    1040-64-0x000000000041F090-mapping.dmp

  • Size

    369KB

  • MD5

    78bb079da255a6c081e397cf6faffa1f

  • SHA1

    c4e1942667fe7bcf971128bde876e738e926faeb

  • SHA256

    7a36bbca2477da6a3a36bfca3e33a2937709440775ad7f70c31b6e654339857e

  • SHA512

    91014eea04c88b32dd440dd8bdd14bdf0f0100ffc0ba36e7947a4ce0c64ac92c720f83dc95c74aefac80e8bb542d5f38fd7bfb9556b01696ee3c86938b2c8167

  • SSDEEP

    6144:pI/zbVE4I5qhpar3Kkjw1NI/zbVE4I5qhpar3Kkjw1D:po3VE4I4WH81No3VE4I4WH81D

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

cqrt

Decoy

fastingbrew.com

mdly715.xyz

july5thpatriots.com

misterbeimusic.net

westernslopechiefs.com

adnanaslam.info

jennissupplygroup.com

llknedlnxvzy.com

mdqjln.today

grillerestaurants.store

rufous.rest

916593.com

xnaoei.com

data-tize.com

9299thapartmenthomes.com

htv7br.com

lawnmowinghub.com

uroafura.com

patriotbeadworks.online

xn--kbrv4kr9humg2qc.xn--io0a7i

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1040-64-0x000000000041F090-mapping.dmp