General
-
Target
0abebb391df1b393b1dffd399a3c083e_JaffaCakes118
-
Size
167KB
-
MD5
0abebb391df1b393b1dffd399a3c083e
-
SHA1
901a4ce0d6c1a875295e85ae81299bccec5031bc
-
SHA256
197c68b4ed753c6df3ec574a87b54c3e885ab6fd036b3f7b0f9c3ceb43276e14
-
SHA512
218228c362990546ef36e021233f67c99c493d4950868bc9a4c53f3f0b748bb4e813b8613b6a7863a3721c284fa5ef502c537c9017b1157e903019263d5048d2
-
SSDEEP
3072:R4ePcflWfQSGtoYsnPRmjubYi9A/xPT7xN4sfWg/bNROY99:pol1eYsPgjubj9A/5x+sfF9
Malware Config
Extracted
formbook
3.8
fr
85highstslough.com
gritgrindgolf.com
davismco.com
elsadehart.com
392manbetx.com
kupadunyasi.net
xxwhxw.info
sdrbxv.com
elazighonda.com
china-adc.com
odxrs.info
201810.top
q212.net
hemlytruckinginccom.info
multiexample.win
bluedocuments.com
nihonspeed.com
ironicon.fitness
barcelonabyboat.com
bentodecal.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0abebb391df1b393b1dffd399a3c083e_JaffaCakes118
Headers
Sections