General

  • Target

    2040-64-0x000000000041F0F0-mapping.dmp

  • Size

    369KB

  • MD5

    9ddd65693f20b8438bd9366492063aa7

  • SHA1

    5850d845129e073c361143931377f47312e2128f

  • SHA256

    0500a8bef9e327e63059900b23cc74c842069594a0cf8e870a84329751f68fea

  • SHA512

    0e68d86882ca13c1c123f28cd4aca13accbb33268713801842fa33341332245b5aa67e4d2dbbc9601b02d883c25c9341910ecaa7d7b97acbe9f14c8ae393f5e2

  • SSDEEP

    6144:09pDqk436jeD79G1hKs9pDqk436jeD79G1hK3:q/4K8G1hH/4K8G1h+

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

ey84

Decoy

agencecapture.com

ky4149.com

thetherapypractice.asia

serviciosemi.com

tprhddxvn.buzz

prompttransport.net

tuv39.site

swd3.com

arti.fun

9kriketnp.com

prozoriy.fun

locphatapl.com

impactxp-dashboard.live

sponsoredoffers.com

buy-used-cars-sa.store

crown.football

jaeralintel.com

rapidguides.online

creaminthecoffee.com

makkaa.online

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 2040-64-0x000000000041F0F0-mapping.dmp