General

  • Target

    520-68-0x000000000041F100-mapping.dmp

  • Size

    369KB

  • MD5

    2f7a2941b62305af88705a891e1c3f42

  • SHA1

    460fa5bc3d171024e9ad30432ea3b0199f904d77

  • SHA256

    84330f33eb4983baade08e197fe19ea5ede5e4246e21591f1240a0cb896ef5c4

  • SHA512

    60ce0bb525cef647f1915880c610836c8991fc88e6530f0632ace024d41840b87c3f09ccc17774ba3d27847542ea915ff1db32592c4ada8552b343d357d9f984

  • SSDEEP

    6144:IXZQ7eqhGd18+IS/kXZQ7eqhGd18+IS/b:IQ7V0IS/8Q7V0IS/b

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

oi05

Decoy

fluidavail.online

blchain.tech

kyocera.website

sangmine.xyz

thepolicyjacket.info

ssvhelpman.net

y-t-design.com

eminentabroad.com

codingcamp.store

bester.capital

tanjiya23.site

bheniamyn.dev

top5monitor.com

bit-prim.trade

airstreamsocialclub.com

darkwarspod.com

zazisalesdistribution.com

vivolentlo.online

daftburo.net

elemangelsin.xyz

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 520-68-0x000000000041F100-mapping.dmp