General

  • Target

    193611040x000000000008000.dmp

  • Size

    188KB

  • MD5

    058861ca9b4716c9a618c864f752a9b2

  • SHA1

    51bf3bb16b9c15ad8bb35c30e0fcba36c5de2e08

  • SHA256

    f56d55c5ad48197d245852fbeb1938f75f6badc2d5ce71b1d94d286858d5b6b9

  • SHA512

    908fb2e4fac2eee1d3f605c30cc0ede9598fd9628102f1b2aecbd3861f828f480a24a096305c63498237a6876e7472a62ee80ca6aa978d5e84280ebf28f865b1

  • SSDEEP

    3072:fXUyY7oEJFgGvNne3usA5Bua4z7bD7uJvlwTQ34l4hoZ+NqbIytMV:rYZ4udOa+7b/uJvlsQ3e42EsMV

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

b04a

Decoy

abm9527.com

nirvanicplane.com

fridaythefactory.com

selfmadepromotions.com

josephinefilieri.com

paradise-gaming.com

j-ixshop.com

zenxcoin.com

49499h.com

azizaacademy.com

prestigewdb.com

lungudashi.com

cryptosmartmoneysetup.com

taylordforyoubeauty.com

xn--brstungsgelnder-blb21b.com

rowpy.com

kirizy.com

cearasummit.com

newsbeeindia.com

lucroexcepcional.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 193611040x000000000008000.dmp