General

  • Target

    2236-267-0x000000000041F160-mapping.dmp

  • Size

    373KB

  • MD5

    e9e1d7158137bb8ab5fe7bddac2233ce

  • SHA1

    b2f4a8b4a2191d87bcade9dba64058822023d0b4

  • SHA256

    162fb9ff5179c2354fc16ec3d87db1307f1c04d8f9c9475b346b4f97e87115d0

  • SHA512

    95f01fdff830af1c828bb9253d3d0c19ff423f355404d7a47946d7f528b90456ffa1b3c04a193ead0103b5896ffbb3d2e6461afe64afb7d887067b58320d8312

  • SSDEEP

    6144:HH63siUlGaXI9Baquh3a+YmwcH63siUlGaXI9Baquh3a+Ymws:DiQ9QaT3a+YXIiQ9QaT3a+YXs

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g2fg

Decoy

snowcrash.website

pointman.us

newheartvalve.care

drandl.com

sandspringsramblers.com

programagubernamental.online

boja.us

mvrsnike.com

mentallyillmotherhood.com

facom.us

programagubernamental.store

izivente.com

roller-v.fr

amazonbioactives.com

metaverseapple.xyz

5gt-mobilevsverizon.com

gtwebsolutions.co

scottdunn.life

usdp.trade

pikmin.run

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 2236-267-0x000000000041F160-mapping.dmp