General

  • Target

    1988-70-0x000000000041F140-mapping.dmp

  • Size

    369KB

  • MD5

    8128105bf875efb431ea1d687a1d099c

  • SHA1

    9d4d08184cca60bf32e0fd9c629ce09d9d64452c

  • SHA256

    4c9267a25793210cabe4dffd1f7b66a6e7b1a69b8678e9466cf2c8016a446024

  • SHA512

    14706b7b6815b79840eafcc9da1efe66e2e8ea46317edcc469d829b2b44ee156458f62b89c4d1c3703a33bc08e73edf2ea014f8a0ac25dfb32ef7e5e54d75c0f

  • SSDEEP

    6144:AZ7ITlntOgrq/w4gDFYZP2xl4C+QNsUNZ7ITlntOgrq/w4gDFYZP2xl4C+QNsUq:AZAntOZapAOcC+9UNZAntOZapAOcC+9Z

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g2e8

Decoy

sawtiger.com

titanblackcat.buzz

caernarfontown.net

aladdin.coffee

we-buy-houses-cash.net

wfzctag.top

bluehouse.computer

hi88pro.online

smtfhcl.com

claimitznow.xyz

wnshots.store

ky3165.com

reviewforus.xyz

sportsandluxurycars.online

swchx.com

babnetwork.xyz

careplatform.online

ventilationbremen.com

templecause.shop

id-serportesepong345464.shop

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1988-70-0x000000000041F140-mapping.dmp