General

  • Target

    1060-74-0x000000000041F040-mapping.dmp

  • Size

    370KB

  • MD5

    c5c87db96578908ba2211c1f92fd2b4e

  • SHA1

    b0f6ddac509a7b6d2f1b7d9a12c88c2a3374a761

  • SHA256

    2be1b6ddd85c2a9193b6fe27eb959e4f4594c328eee5bf7ad576dec0e4dc6329

  • SHA512

    dbf401e87b7cc0c398f074d0c6b4dfd57416662a9f323a0212c4412799a23d1ae659479c201b1b2bdd34e15fc3a064e3044bbcb0524736d79f42e5478fdcf551

  • SSDEEP

    6144:paOI6UpibdjIU27MtyXywwRaOI6UpibdjIU27MtyXywwj:FI68DMtSCI68DMtSc

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

m21d

Decoy

ffewv.com

romarg.investments

icoproject.net

syrexol24.xyz

tyxa0.xyz

worktime.website

oilysquat.sbs

hainihaoxx.top

apimarts.com

agorainvestmentscc.com

happyhorsegear.com

373145.uk

3commerce.net

2561havensdr.info

thesolosearcher.com

gwo888.com

luxefofriend.site

ascendarrays.com

diorbear.com

newsforthecolumbiagorge.net

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1060-74-0x000000000041F040-mapping.dmp