General

  • Target

    4904-257-0x000000000041F160-mapping.dmp

  • Size

    373KB

  • MD5

    025ae230e1e9a3920d4d27b16f85beea

  • SHA1

    d9b45dcb4da09a9673fa1ec42a7cd85323a7f7f6

  • SHA256

    5626c7e75da3481464ad820b256281b896e986a6c99a98b1c9d15d0219b8a655

  • SHA512

    621ed6ed312729e2b2a60993baef200a85afd9b98adf8d1c574333c7d9cdbba36e1fd372ba1a0e3815034ea6f2e791ac8b9e356283dee5cbd64398748675bebb

  • SSDEEP

    6144:IH63siUlGaXI9Baquh3a+YmwcH63siUlGaXI9Baquh3a+Ymw2:kiQ9QaT3a+YXIiQ9QaT3a+YX2

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g2fg

Decoy

snowcrash.website

pointman.us

newheartvalve.care

drandl.com

sandspringsramblers.com

programagubernamental.online

boja.us

mvrsnike.com

mentallyillmotherhood.com

facom.us

programagubernamental.store

izivente.com

roller-v.fr

amazonbioactives.com

metaverseapple.xyz

5gt-mobilevsverizon.com

gtwebsolutions.co

scottdunn.life

usdp.trade

pikmin.run

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 4904-257-0x000000000041F160-mapping.dmp