General

  • Target

    1980-64-0x000000000041F060-mapping.dmp

  • Size

    369KB

  • MD5

    d8396d32358a9326a5b80d9b458fe3a3

  • SHA1

    3d94ece3b1fe27056486f56d608260b37b8db3bb

  • SHA256

    ad64be9ed0f8316a9f3da36f7485edf559ccd45ba088e57cf59fbe3d7c53d462

  • SHA512

    12b2d209261de590566ec0e08abbcf4183a262400b9c8f417fa937d109d74f5d344e31800c5166fedbcd61de8455f8a6a311a555d48b769b7ee400f10e6376f5

  • SSDEEP

    6144:+fQOrM6NgXwYfbJw1fYhr8GEm9fQOrM6NgXwYfbJw1fYhr8GEmm:fOrHXYf9w1QhpEmyOrHXYf9w1QhpEmm

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

d10a

Decoy

tprgamesslot.com

1wautomarketing.shop

jnfc.bar

reelestate.info

coolvenead.buzz

am2pmconstruction.com

casasbh-digital.com

kmzu.info

magabestonline.com

evdirect.net

utaxi.app

gamemakr.tech

klsxofficial.com

qfaw.mom

bwchosting.com

joseli.xyz

carnelianintimates.com

manarnews.site

axacpe.click

pinupmeals.click

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1980-64-0x000000000041F060-mapping.dmp