General

  • Target

    840-64-0x000000000041F1C0-mapping.dmp

  • Size

    369KB

  • MD5

    0d1e3d1d264403350ac27aef825d3321

  • SHA1

    09d21ae9aebd8780f306dee0812adc54366a2363

  • SHA256

    3254c99ededb61dc14c58d11bcca8d0ec6e0ce7a2064fccd25932be9d9f83b4c

  • SHA512

    47de0e43dc4b8a014e8886cf5982d2b26dca8f6207c1d659132fb649409fe46e25df05f0bc8e80eadcc19d704472fd8233474eb02475c2f5f3a3d22e76317632

  • SSDEEP

    6144:SpM5slSLlZwTKnhaRCDpM5slSLlZwTKnhaRCW:V5slwlHwRB5slwlHwRx

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

sg62

Decoy

postenr.com

hh11z.top

datasysperformance.site

cyber-xpert.com

cybearvisual.com

topgkeychins.com

koshdental.com

ag-bathrooms.com

fidgetninjaz.com

cistanbulc.net

synabilisim.com

cocotototutu.xyz

cyberressm.com

tournest.info

drymixsubstrate.com

imsooverthisshit.com

totaleliteme.com

orientalgemco.online

dwpohy-2wps.click

graceresurrection.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 840-64-0x000000000041F1C0-mapping.dmp