General

  • Target

    2024-74-0x0000000000080000-0x00000000000AF000-memory.dmp

  • Size

    188KB

  • MD5

    5f664094bbd6f66d4c75afebd6b9df2d

  • SHA1

    e677ffb8c993a06e87180f4ac23b842d07a71595

  • SHA256

    e84857df3a08d85e429e8c7bc586010539ec33eef2cef0ee1de03fafa1fd4a82

  • SHA512

    5747794ca033e4c3c8a015e918a3872a00e451f853acd358c86db30f0e9562e8d571145b09036e968f48fe4d0526512401c3e8366fbb88581ddf583732ae5234

  • SSDEEP

    3072:djupsjEmQRD5L/g33CpMhNqAWo4D75A9BZz5+4y2a1tQVvcPx/QnS:dSqwu3aMnqAWo4u9zNVvcx1

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

sm28

Decoy

encoter.shop

economicalhearing.com

composeexpertisefare.makeup

moffice.online

mayvar.store

klean4life.info

buytamaadoge.digital

digiwelldata.com

cngnaturalgas.com

scibrew.com

foxyellow.com

lceqtg.xyz

ufhrk.site

35445.top

reply.express

ky9347.com

takfy.com

77008.top

rentalsscreeningssetlement.com

incontrisessuali.space

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 2024-74-0x0000000000080000-0x00000000000AF000-memory.dmp