General

  • Target

    856-71-0x0000000000070000-0x000000000009F000-memory.dmp

  • Size

    188KB

  • MD5

    90d6282b8cacab84c32059657c4d8cff

  • SHA1

    cc111ee2926bfdcc36172948519e77b4bfbb4184

  • SHA256

    56bd8a8defff49c2c47b4f7072934a4d3be05287c9f632a797b42f24b8ae3a0a

  • SHA512

    1ff991534fdd4fcea1641fc7f9e438b945eaa1419bfdf8b39b48ab68a86136720c64251bdc462f3c56868548e9dbf58c49e70aa55659f0cf50c2ddaf336d19d5

  • SSDEEP

    3072:vHM2MrbZdkM78Qr6yg53nYkOgMUq/Q4f4yYLN75ZmZP2xl4COdQPVsUB:vkZ7ITlntOgrq/Q4gDFYZP2xl4C+QNsU

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g2e8

Decoy

sawtiger.com

titanblackcat.buzz

caernarfontown.net

aladdin.coffee

we-buy-houses-cash.net

wfzctag.top

bluehouse.computer

hi88pro.online

smtfhcl.com

claimitznow.xyz

wnshots.store

ky3165.com

reviewforus.xyz

sportsandluxurycars.online

swchx.com

babnetwork.xyz

careplatform.online

ventilationbremen.com

templecause.shop

id-serportesepong345464.shop

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 856-71-0x0000000000070000-0x000000000009F000-memory.dmp