General

  • Target

    1684-69-0x000000000041F180-mapping.dmp

  • Size

    370KB

  • MD5

    c54118c3bbab2bf6a59375d280f89fcb

  • SHA1

    d163d4cc4c78593f8811a8f5820e5d7b97181ffe

  • SHA256

    52578bc73b38f2b2df8f648aa099a727b8924dfcbebea5665c58c8d313668ef6

  • SHA512

    7bc0abf248f72217fd9c0908aabb9f10fd52b25e831ed949a7e7036554dfcb32ddf5b60fe66b7d5fe9d61c8143c7f22908a1526e912f1a2d6d44e39356d428db

  • SSDEEP

    6144:hNrG2qtbNXoDEqGYamszUFNrG2qtbNXoDEqGYamszUD:u2q1FXzUS2q1FXzUD

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

de19

Decoy

predictivemedicine.life

coloringforthepeople.com

project154.com

usmmexchange.com

bootzxon.com

chaoge730.com

thenaci.com

moviestarplent.com

musicallyengaged.com

sneakerspark.net

yudist.com

apqrcx.xyz

traceless.tel

guardlanavionics.com

usadogrights.com

openei.club

aventusluxury.com

telewebin.com

godrej-threeparks.net

solbysol.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1684-69-0x000000000041F180-mapping.dmp