General

  • Target

    2004-64-0x000000000041F030-mapping.dmp

  • Size

    369KB

  • MD5

    64ae6d310723ecd1e56432dee79323f2

  • SHA1

    a5db17289ae13b6d0edc86387f84283407aafaa0

  • SHA256

    26982c103eff4fa71304f596eeed23057e401bea1ffb297be3767cbe65db8024

  • SHA512

    be27e812ad4e8f8ba8bbca29e6a7525223987187c4750eaa57882ec1c7c2ba05687ca4729be2cc2f28de12412e85cb6e825f04798be63f87681bbddd5f1ce80e

  • SSDEEP

    6144:JSeB/bElJv6AuUmIheaoGz/Hz7SeB/bElJv6AuUmIheaoGz/Hzt:JP/bQiJIhJDvz7P/bQiJIhJDvzt

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

d42n

Decoy

uprankmedia.com

susannaroberts.one

umbrellaman.gallery

chamsocphaidep.net

kalravjoshi.com

americanathleteaward.com

pawtreat.pet

anyv.us

sadaskjfh42.shop

diaodao.net

du2agcuwtbss1la.xyz

petra-hildebrand.com

medinette.site

insurancestrategy.agency

tomatosoup.online

i-suppor-t.us

prefectoprocrus.site

kubbeev.xyz

x5media.agency

evandrosys01.tech

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 2004-64-0x000000000041F030-mapping.dmp