General

  • Target

    2020-63-0x000000000041F0B0-mapping.dmp

  • Size

    369KB

  • MD5

    21f42109f57844739767737054931ef8

  • SHA1

    e0e60a0241c3a199d38ac00c794e4a487a29c70f

  • SHA256

    59a7184405d6baf3b8698b3ef7a8cc8d2f507ffad9c2910a4f6d3e8659603122

  • SHA512

    750f6bfc46bf16e0ab617b8b25c29a75cc04694ed9652750bbd692574c4bd656972f43bfc17bbe8f9dff5d808b490e971e39726dc6fb698b1e16a1952ca4c4e4

  • SSDEEP

    6144:RtD170Jqyr4NTjWl8Lb0SxAtD170Jqyr4NTjWl8Lb0Sx0:570oeA0mC70oeA0m0

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

th47

Decoy

bestguy8.online

artpressonline.com

touzitest01.com

thecolorbuzz.com

xn--est572f.top

ayumandya.com

arxdigital.com

ayaretri.online

ajanseralp.com

createna.com

inquisitivemeditation.com

qhqfoq.cyou

mango369flower.com

comeherequinn.com

xvideos202216.xyz

reopdat.xyz

guosetianxiang.xyz

asynctest11.top

pineclass.com

cq4n0lrbygmgke.kred

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 2020-63-0x000000000041F0B0-mapping.dmp