General

  • Target

    2712-10-0x0000000000400000-0x000000000042F000-memory.dmp

  • Size

    188KB

  • Sample

    240801-jdyxgstcne

  • MD5

    05ab8ec1bce22f011c6da0db13fe24af

  • SHA1

    6470bb33133debc6842ecfc35a591b4d29945dee

  • SHA256

    ac8032483689ee51d2555f9dc7947cbd2ffa4dd7b4b852770c4cc8abd745d511

  • SHA512

    467d9dd0b6e679c652bac80c122a1646dac40ac08873b572bd34ae3821c92758696cb0544c92f49755614bc7c1b7ecc57a07e3d275325ec9a3ee6e5bd9f6e04d

  • SSDEEP

    3072:5ZFZzk/XkacJaIK332BnF8g2qFQJxuwYcBAUfbDWC1Hetvcor:vNZM3SnF8RqFQJxdYEAAic

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

by21

Decoy

digitalillusions.net

changeblue25.com

kitchenwoow.com

grupocontigoalimentacion.com

iranabr.com

embodiedmagic.com

superstoreszone.com

apartments-for-rent-46883.bond

kelbagnole.com

rideskratchlab.com

a06kng.club

saddlebredallstars.xyz

filepd.com

kxetdf.asia

dl39yy.com

jackedsearch.com

exodusprofessionaldetailing.com

ecommerce-40144.bond

uh3b94g3pyczi9t.skin

dcmcc635i.xyz

Targets

    • Target

      2712-10-0x0000000000400000-0x000000000042F000-memory.dmp

    • Size

      188KB

    • MD5

      05ab8ec1bce22f011c6da0db13fe24af

    • SHA1

      6470bb33133debc6842ecfc35a591b4d29945dee

    • SHA256

      ac8032483689ee51d2555f9dc7947cbd2ffa4dd7b4b852770c4cc8abd745d511

    • SHA512

      467d9dd0b6e679c652bac80c122a1646dac40ac08873b572bd34ae3821c92758696cb0544c92f49755614bc7c1b7ecc57a07e3d275325ec9a3ee6e5bd9f6e04d

    • SSDEEP

      3072:5ZFZzk/XkacJaIK332BnF8g2qFQJxuwYcBAUfbDWC1Hetvcor:vNZM3SnF8RqFQJxdYEAAic

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks