General

  • Target

    748-78-0x000000000041F120-mapping.dmp

  • Size

    369KB

  • MD5

    cf574a67782110e2a4169b7ce839c5cd

  • SHA1

    bd8ff2755ab55fa55fa7612289908d1c80151588

  • SHA256

    0ca6e82b48fe12e677f5f4386d39fb8f7fa4e0c399eb2444d8cb59bd44e05753

  • SHA512

    68b0aeeb468aaa7d9f314c99fcc5d43ddd9add755dd3b13248d05038df57f96c7df5ccce247f1aa4fdb8c7bc3687af480097f14d0708955f68726fbc93e09683

  • SSDEEP

    6144:Z5HxARctYRrKKbuBPSIKjmxyJbY5HxARctYRrKKbuBPSIKjmxyJbq:sctYIpWjxJbFctYIpWjxJbq

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

d06c

Decoy

douglasdetoledopiza.com

yxcc.online

primo.llc

mediamomos.com

cosmetiq-pro.com

22labs.tech

turbowashing.com

lindaivell.site

princess-bed.club

groundget.cfd

agretaminiousa.com

lomoni.com

nessesse.us

lexgo.cloud

halilsener.xyz

kirokubo.cloud

corotip.sbs

meghq.net

5y6s.world

weasib.online

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 748-78-0x000000000041F120-mapping.dmp