General

  • Target

    1756-64-0x000000000041F0F0-mapping.dmp

  • Size

    369KB

  • MD5

    8ce9e71ab0499f7fc76bdb2b967cec0e

  • SHA1

    1f038c8aeebef482888983785b84a61d61733ad6

  • SHA256

    f9b67091deaab022f8aff5440e3c12802dc997c44e86d3f12ebb2ac30eda3edc

  • SHA512

    5d2211ac1d95b52244c15e26137be99445ffe0e4c8563ec16cbb500234ceba6b01692544c1a78e8a10b4581cb0637ca6be42944dd215ab07aef529575eca42bf

  • SSDEEP

    6144:Su/6DWvY60Qk8YwapKQUgrq4u/6DWvY60Qk8YwapKQUgrqR:4DWv77CUGDWv77CU9

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

p94a

Decoy

wishgrove.com

parqueveiculos.com

spiderwebs.online

chulkanadham.com

cdtuan.net

zxazm.com

payment6528832.xyz

fengtaiol.com

bffsmovie.com

aliceseagerfitness.com

garisluruskonsulindo.website

analytical-gutter.net

ahcq8.com

fenyoga.com

ecleptic.cat

conjurecrafts.com

aquaway.date

apenpokkenschoonmaakbedrijf.com

zgramr.top

boweknives.site

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1756-64-0x000000000041F0F0-mapping.dmp