General

  • Target

    1728-68-0x000000000041F180-mapping.dmp

  • Size

    370KB

  • MD5

    a3d0f0037c76c377bb7419474eb21725

  • SHA1

    797684b725a8546dfe136a35a9e40e5d51a678c2

  • SHA256

    72f955765cac3390c5ef623919776bdf328d3bdcb84645d92fe15df2c6b31109

  • SHA512

    175e4382c4ce8900018cedd7e8a74f808243cb000748e1c74a4a361585d14ea99aec0cead01bb85b906080dce7ca4fce224b6e56ed9c4e47806f1bf3dfa6b009

  • SSDEEP

    6144:NNrG2qtbNXoDEqGYamszUFNrG2qtbNXoDEqGYamszUD:a2q1FXzUS2q1FXzUD

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

de19

Decoy

predictivemedicine.life

coloringforthepeople.com

project154.com

usmmexchange.com

bootzxon.com

chaoge730.com

thenaci.com

moviestarplent.com

musicallyengaged.com

sneakerspark.net

yudist.com

apqrcx.xyz

traceless.tel

guardlanavionics.com

usadogrights.com

openei.club

aventusluxury.com

telewebin.com

godrej-threeparks.net

solbysol.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1728-68-0x000000000041F180-mapping.dmp