General

  • Target

    1324-148-0x00000000009C0000-0x00000000009EF000-memory.dmp

  • Size

    188KB

  • MD5

    65c3fdfd874088999be1fea5d2824157

  • SHA1

    a7e0e9a4d94a3219e5adec1678f16a0a4d49c095

  • SHA256

    cf17cc592a192af2063c37fa7ee45fa50f0e339c8b795597948bff687d4381ae

  • SHA512

    d018ff13d0b0693519ef325c53359072e3cf6daab5925621abbcfdd64c2de5d9600ea678803b25c5f6eec23e88c5f403982a61759466ab593e23ffc968ad2673

  • SSDEEP

    3072:lNb2MvBkKF1wvzJ93ikcMZ9Xa22zNU2sMdEJjuSOVqRgcanfv1tfGHo06nBIw:T/mxilMZta22zm2VVEZGGI067

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

wh23

Decoy

ow9vyvfee.com

alvis.one

mutantgobz.claims

plynofon.com

southofkingst.store

nuvidamedspa.com

coffeeforyou56.com

opaletechevents.com

momobar.life

abcmousu.com

learnicd-11.com

tipokin.xyz

kahvezevki.com

suratdimond.com

oldartists.best

infoepic.info

mattresslabo.com

skarlmotors.com

cl9319x.xyz

med49app.net

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1324-148-0x00000000009C0000-0x00000000009EF000-memory.dmp