General

  • Target

    588-68-0x000000000041F100-mapping.dmp

  • Size

    369KB

  • MD5

    671d3dcab4ab9f96a7fb6945ceca36e5

  • SHA1

    4f699524978289227a2442c98d3e93ab502e46d5

  • SHA256

    c19157638b71333fd7ab24efa2ed1510a99320132822fa095ea8b7633a141788

  • SHA512

    60f782bf14a5a9650b58ab8634ed26e6ee9402d8db45df300d8e25dc07ddf6831632ebb324be9e34f285f5091660d35eddfefe39dd434eba8606879cf45f794a

  • SSDEEP

    6144:UXZQ7eqhGd18+IS/kXZQ7eqhGd18+IS/b:sQ7V0IS/8Q7V0IS/b

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

oi05

Decoy

fluidavail.online

blchain.tech

kyocera.website

sangmine.xyz

thepolicyjacket.info

ssvhelpman.net

y-t-design.com

eminentabroad.com

codingcamp.store

bester.capital

tanjiya23.site

bheniamyn.dev

top5monitor.com

bit-prim.trade

airstreamsocialclub.com

darkwarspod.com

zazisalesdistribution.com

vivolentlo.online

daftburo.net

elemangelsin.xyz

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 588-68-0x000000000041F100-mapping.dmp