General
-
Target
f16872376e977e9207e3d7dd00b10668_JaffaCakes118
-
Size
326KB
-
Sample
241215-amcwyaymaz
-
MD5
f16872376e977e9207e3d7dd00b10668
-
SHA1
69071e81cecc95e14abb4f5b63022bac7e58917b
-
SHA256
0eb1ba9ffda738eb8e8d61759d1ab4b6495a2338366b0049e0d37c5a3f74adc4
-
SHA512
8f2683658635e1d2690dae8092dafc49388ee39774606d1add1bbee0b8d3b3aad3208d1e9b0efe9e4cf3e6fbce06081a021dff138841769c46be6dab50b74e9b
-
SSDEEP
6144:NVEvr1ftfc/L/D4zznZaLlacX6qpB+j5desd3ZbiWZl6:NVEvr1xc/LI9SlMqpAjH3d3Ze
Malware Config
Extracted
formbook
4.1
dn7r
eventphotographerdfw.com
thehalalcoinstaking.com
philipfaziofineart.com
intercoh.com
gaiaseyephotography.com
chatbotforrealestate.com
lovelancemg.com
marlieskasberger.com
elcongoenespanol.info
lepirecredit.com
distribution-concept.com
e99game.com
exit11festival.com
twodollartoothbrushclub.com
cocktailsandlawn.com
performimprove.network
24horas-telefono-11840.com
cosmossify.com
kellenleote.com
perovskite.energy
Targets
-
-
Target
f16872376e977e9207e3d7dd00b10668_JaffaCakes118
-
Size
326KB
-
MD5
f16872376e977e9207e3d7dd00b10668
-
SHA1
69071e81cecc95e14abb4f5b63022bac7e58917b
-
SHA256
0eb1ba9ffda738eb8e8d61759d1ab4b6495a2338366b0049e0d37c5a3f74adc4
-
SHA512
8f2683658635e1d2690dae8092dafc49388ee39774606d1add1bbee0b8d3b3aad3208d1e9b0efe9e4cf3e6fbce06081a021dff138841769c46be6dab50b74e9b
-
SSDEEP
6144:NVEvr1ftfc/L/D4zznZaLlacX6qpB+j5desd3ZbiWZl6:NVEvr1xc/LI9SlMqpAjH3d3Ze
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-