General

  • Target

    2036-78-0x0000000000080000-0x00000000000AF000-memory.dmp

  • Size

    188KB

  • MD5

    0f7d93d2aab60f9613a946dfaf22b51d

  • SHA1

    4af3bf86e64f83a4433f738ddf4595560cd1506b

  • SHA256

    dc3064c4134ef09dbe72f0247d859a85b53c4e66807d0017cdcd351027fe2aa7

  • SHA512

    27d5684a13fcb2c7e9ef947797cf409957f6f3007e4a8e7a5ccd59adcebd7c7aebf3cc2cf47e4589e315d9e7b293161fbfd92c0b0ec0d73a01accae7dcb0aeb0

  • SSDEEP

    3072:7bMrbZdkM78Qr6yg53nYkOgMUq/Q4f4yyLN75ZmZP2xl4COdQPVsUB:CZ7ITlntOgrq/Q4gdFYZP2xl4C+QNsU

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g2e8

Decoy

sawtiger.com

titanblackcat.buzz

caernarfontown.net

aladdin.coffee

we-buy-houses-cash.net

wfzctag.top

bluehouse.computer

hi88pro.online

smtfhcl.com

claimitznow.xyz

wnshots.store

ky3165.com

reviewforus.xyz

sportsandluxurycars.online

swchx.com

babnetwork.xyz

careplatform.online

ventilationbremen.com

templecause.shop

id-serportesepong345464.shop

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 2036-78-0x0000000000080000-0x00000000000AF000-memory.dmp