General

  • Target

    1228-64-0x000000000041F180-mapping.dmp

  • Size

    369KB

  • MD5

    7ab9d496b463055b06572b3df9b4c50a

  • SHA1

    13aeeec76768ba97b047356c81a89e3c15666bab

  • SHA256

    8cc879ff66c151bb2b66f6a94d070c20af7afbd6b625ba61b6c02e098bc6d828

  • SHA512

    22992c0e136022129884525d1ccc93ad144243d0584ea94b94ba170fb7823409256afe436a2bb53f568072231a3a01472dbd2f99b9c3ae7b5e0e666eb36db31b

  • SSDEEP

    6144:dakLe8IcihUbsdlscUIsy9yrWeakLe8IcihUbsdlscUIsy9yrWu:Yk3IcihOTRIsy9yrek3IcihOTRIsy9y5

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

ndgi

Decoy

vuicotvxrejp3il.xyz

w3fa6.net

sappuno02.com

konstruksirumah.xyz

usalifehealth.com

and1f.xyz

atenmentfstinfdow.beauty

primepipe.net

roundhouseny.com

alexandermcqueen.icu

transporteavalos.com

spankmetaverse.xyz

jhccowholesale.com

bielefeldgebaeudereinigung.com

saintraphaelschool.com

larifaa.online

dejabrew.info

izabelaeraphael.com

granniestoneet.com

greensourceseed.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1228-64-0x000000000041F180-mapping.dmp