General

  • Target

    520-69-0x000000000041F160-mapping.dmp

  • Size

    369KB

  • MD5

    aaa047a903f2a3b5f7767ac469a5bf24

  • SHA1

    b98b2d567a6e82f1c33b2108cb8f2f48ec7ce0ee

  • SHA256

    1b640aed0020124f15942381d2dd55dfb2d85643007a8cce9072d47e25135f70

  • SHA512

    32aa240e355dac85cb435ebcaabb1f1d93745eb768015d7d51d29bc48dec43aa3c2e61d39db0de90d7e54a6b926660e26d6bebad2164ad4ac13d577d4b36b053

  • SSDEEP

    6144:UH63siUlGaXI9Baquh3a+YmwcH63siUlGaXI9Baquh3a+Ymwz:giQ9QaT3a+YXIiQ9QaT3a+YXz

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g2fg

Decoy

snowcrash.website

pointman.us

newheartvalve.care

drandl.com

sandspringsramblers.com

programagubernamental.online

boja.us

mvrsnike.com

mentallyillmotherhood.com

facom.us

programagubernamental.store

izivente.com

roller-v.fr

amazonbioactives.com

metaverseapple.xyz

5gt-mobilevsverizon.com

gtwebsolutions.co

scottdunn.life

usdp.trade

pikmin.run

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 520-69-0x000000000041F160-mapping.dmp