General

  • Target

    4520-251-0x000000000041F160-mapping.dmp

  • Size

    373KB

  • MD5

    5cd234d9675643e99ceca3b14ab227cb

  • SHA1

    db56fec4cf5312e7bc8784f4d6f74e15e6e8410e

  • SHA256

    7e6303fed81528e4faad433c84f51a1d6de88944ea4948517d22b2f13e2b5de4

  • SHA512

    bbb4f41f8db9f2c66f96b8314d5fbb5ad53cfd189efa48e97e08013a8b6ca1f8aea033cf3941bf7c404ca75f0714d71d390cf3ffd3a280c0ee741cfeef5aad40

  • SSDEEP

    6144:mH63siUlGaXI9Baquh3a+YmwcH63siUlGaXI9Baquh3a+Ymwj:aiQ9QaT3a+YXIiQ9QaT3a+YXj

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g2fg

Decoy

snowcrash.website

pointman.us

newheartvalve.care

drandl.com

sandspringsramblers.com

programagubernamental.online

boja.us

mvrsnike.com

mentallyillmotherhood.com

facom.us

programagubernamental.store

izivente.com

roller-v.fr

amazonbioactives.com

metaverseapple.xyz

5gt-mobilevsverizon.com

gtwebsolutions.co

scottdunn.life

usdp.trade

pikmin.run

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 4520-251-0x000000000041F160-mapping.dmp