General

  • Target

    2516-47-0x0000000000650000-0x0000000000750000-memory.dmp

  • Size

    1024KB

  • MD5

    adebf2f1ebf7a6244a5c73864b035bfb

  • SHA1

    eaa0fbc4cac126efb145369a5a72af91ba2a8f99

  • SHA256

    e60fc4c99f1291fdb10f29f7c7e88d5430231c0af3c8951b42b4d9188fed2de1

  • SHA512

    75b942b669bbd5e9589888e53ea090202b4f6bb16550fa94a5e0e053c21b1a21449da65d0ed00577c5579db55b6bc99366c75cab8ab641dfdd9bb02082eeec2c

  • SSDEEP

    12288:utw2YPRKOu7b6WbPlKvqzVlF0earnV21pxemx5b:uGTufPbnr2+pxemj

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

rc2i

Decoy

gdhuadong.icu

girls-at-a.click

income.rocks

immobilientopclub.immo

frigologs.net

dominohome.store

lowestedt.motorcycles

purplesoul18.asia

fashiontochic.net

jpvalettrash.com

rgvneckpain.com

brainstormingpartner.com

xvwk.asia

universalnikko.com

3887788a2.top

militarysextv.com

xxysocial.com

coachbycoach.com

caregivergrantsfindonline.today

kimetsumatrix.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 2516-47-0x0000000000650000-0x0000000000750000-memory.dmp