General

  • Target

    152f259addce46dc95df6c65923925ed_JaffaCakes118

  • Size

    674KB

  • Sample

    240505-ax2caabh85

  • MD5

    152f259addce46dc95df6c65923925ed

  • SHA1

    e4e539de3617dd8796c8993fdecb490e9cbf7897

  • SHA256

    6be3f722a9d961b2b5e056c222ea5abc6c2bbe7825e0dd0e7ec773916e6e5445

  • SHA512

    b9eb5410848330ef82d3df3c56bd9066d10b9c84c5efbcb2fb9cc88116e871430bd40c9d3677b3df6dd3fbbf2780dd15d164e9f60e646657b35bc3c549c940fc

  • SSDEEP

    12288:Voq34p7sxKjVGTmxorl7XZ8xmhmMvaBneNKpq7rYc9lRB00zqS1QwUZxvQY98gjk:foLoThNXgcaINKpL6lM0F1QwUZxvQYvI

Malware Config

Extracted

Family

formbook

Version

3.9

Campaign

a20

Decoy

constructionremedyinc.com

hamiltonnorman.com

theredevelopmentcompany.com

efecto.net

jandacaramel.com

onlineexitpoll.com

akshikatech.com

innover-cotedopale.com

viralthinking.info

collectionsandcurators.com

reviewyourwebpage.com

metaquantic.com

qxmjt.com

jan-galo.com

jeeeplee.com

aelrokoqujmri.com

2cdyc.com

vibrational-harmony.com

lamarnt.com

agritistic.online

Targets

    • Target

      152f259addce46dc95df6c65923925ed_JaffaCakes118

    • Size

      674KB

    • MD5

      152f259addce46dc95df6c65923925ed

    • SHA1

      e4e539de3617dd8796c8993fdecb490e9cbf7897

    • SHA256

      6be3f722a9d961b2b5e056c222ea5abc6c2bbe7825e0dd0e7ec773916e6e5445

    • SHA512

      b9eb5410848330ef82d3df3c56bd9066d10b9c84c5efbcb2fb9cc88116e871430bd40c9d3677b3df6dd3fbbf2780dd15d164e9f60e646657b35bc3c549c940fc

    • SSDEEP

      12288:Voq34p7sxKjVGTmxorl7XZ8xmhmMvaBneNKpq7rYc9lRB00zqS1QwUZxvQY98gjk:foLoThNXgcaINKpL6lM0F1QwUZxvQYvI

MITRE ATT&CK Matrix

Tasks