General

  • Target

    612-68-0x000000000041F190-mapping.dmp

  • Size

    369KB

  • MD5

    9b3ab2f0e2aa094663e518db7c1bddf4

  • SHA1

    18f928cabc8741b538c8aadbfef10462800725bb

  • SHA256

    021727405509f2e91af379212a9c0645a4ce296fc3593edb786ed8d50721e997

  • SHA512

    356ab5841e5b2bbfbb472999ff5efdf6ba3c7ca542289ce5f0a83068a60c5209ea7f849ee5321468e59955045b76e922e16cc9e1740b0bbb0983eb2447fb5606

  • SSDEEP

    6144:vSbM+9SHMLPLgyOvOmneHAvRnCCVoSbM+9SHMLPLgyOvOmneHAvRnCCVK:aM+YHmg2mnegBDPM+YHmg2mnegBDK

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

dc36

Decoy

cigarvana.com

ebtekarlian.com

roshankumarsingh.works

madhumitha.online

ticketchair.live

dallasuncontested.com

noamle-tlv.com

stamppixie.com

the-cab-company.com

dancingcats-tw.com

spincoin.vip

gd-extracts.com

zwiz.town

fvgtymo.xyz

joyterapeuta.online

richforeman.site

casaservise.com

watchmovionline.com

billiotdf56.online

littlebylittleshop.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 612-68-0x000000000041F190-mapping.dmp