Overview

overview

10

Static

static

10

328-31-0x0...ry.exe

windows7-x64

1

328-31-0x0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    328-31-0x0000000000400000-0x000000000042F000-memory.dmp

  • Size

    188KB

  • MD5

    146502824eb1475d3632a1be9720633b

  • SHA1

    470b257ddebde43dd5c7bc7b21a93f19d27026af

  • SHA256

    ed20f98bbba8c56498ac09821b16529692fe3080df78deac4f95e09753b30fe9

  • SHA512

    e31f3c66d85bb97dd6f09003efce225ee405d0366a05e88b1928cbc01cb0761b5d5fa689004c57906ed21bd8c0e08e49e49bf922ac99010b64cb4c65ebec13f8

  • SSDEEP

    3072:DBcZkHbBzO+V+T3kF0jAlsKno7eX+wLDO8t1AEYs0VNhAu:JT+7k6MsKno7itPOS9mL

Score
10/10
ratbp31formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

bp31

Decoy

nftcyberpunk.com

nwg7e.top

go99subpay.com

colkora.com

bkicg.com

chubbysamericangrill.com

ongcndwoyao8060.top

goodbye-horses.com

gchzwf.com

baisheng.site

mkfnrej28.xyz

rbxer.com

evitasoht.site

keymuscatgroups.com

jobassistancehub.com

school-necromancer.com

shop-pravaonline.online

prefabricated-homes-62419.com

vzuvzabuv.com

bolfm.com

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 328-31-0x0000000000400000-0x000000000042F000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections