Overview

overview

10

Static

static

10

2264-22-0x...ry.exe

windows7-x64

1

2264-22-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2264-22-0x0000000000400000-0x000000000042F000-memory.dmp

  • Size

    188KB

  • MD5

    29879d8cca0b9919484c85b6a1113889

  • SHA1

    46d4bb771c27a12ac490a2856b06df41fca06510

  • SHA256

    63da5d1bf36e1c74cc41db76adfb4c48acb24ac3ccf85e076d4d2cb6f80f0e12

  • SHA512

    32c7c9190531f9b4438d819930adb2ca57f6f1f9bf47f012881521e2b8f725f3535b1aae8c4c175489726b485d95f3f519ac1aaa008fbaa7e898e72f28c9e8ff

  • SSDEEP

    3072:OywCYFs6M2s8GWUjjg8G3sO/XqF3BE20M3Wx5/50ZcKCP7ZE6oYtqKr:zFKUjjxu/qF3Br0M+5x0ZcKQmjFA

Score
10/10
ratk94gformbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

k94g

Decoy

nstandgoz.xyz

dhd-treatment-37310.bond

13s-braces-us-ze.fun

umdona.shop

96ph803ql.bond

kka9max.net

corporate-10.xyz

edicalassistance869840.online

lobalresources-bh.xyz

3145978.xyz

ovdaawebsite.online

etting-thailand.net

icloud.xyz

poxk.shop

25ks-ls72510.cyou

women.info

iwyrfbfvhv9.asia

luratu.xyz

ffordable-power-charger.today

edanuryilmaz.xyz

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2264-22-0x0000000000400000-0x000000000042F000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections