General

  • Target

    1296-71-0x00000000000C0000-0x00000000000EF000-memory.dmp

  • Size

    188KB

  • MD5

    6424abeec3de54494f4644a7227b362c

  • SHA1

    e21ba130918bd7ba0bd17e9e9b5116d4e17f833c

  • SHA256

    d23d8d9ed0202729ff428c63074b154f30ec2d330fd538bb29978765d6271f7e

  • SHA512

    f88864efd619fcd6e14082765aabf641baa71b99172efb3501885e40f2ccc3177e4ac55dd01284306f362982b18e748238d7bd77bf73ddb4aa85178ab1412928

  • SSDEEP

    3072:5yQVd1kaHVhE4RN3vqXFamKhSpfUW4jpVrw62V3Huz:kgzBv49KhSpOjpJ6xuz

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

oy10

Decoy

wzwanju.com

vaultnutrition.info

propane-gallon.site

balkanmetin2.com

costa-del-sol.email

kayodeokikiolu.com

singlesshirts.com

nearestfoods.com

trenddetail.com

yihaimaidan.net

dfdr3r.site

tuitionmatters.co.uk

benglas.online

coloraja.xyz

tianzicheng.com

lamkt.com

dileca.com

6698856.com

vishi.store

ablehair.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1296-71-0x00000000000C0000-0x00000000000EF000-memory.dmp