General

  • Target

    JaffaCakes118_b85c4d917f9b9478ffa3b901a54b805c865506efd059adcaaa607e34648fa659

  • Size

    369KB

  • MD5

    babc6fc9021c9aa37e80b5599739eb10

  • SHA1

    409eb47a4d8e3b7d2d1db53ead454944ff252a0b

  • SHA256

    b85c4d917f9b9478ffa3b901a54b805c865506efd059adcaaa607e34648fa659

  • SHA512

    ca24481a24aa754f3eb71c2a826333d13c08afff14e3d210bf431ea60b1b9810918b408c1e388bf2b94304a818cf6393cfab55b9e0834c0103331081ea9d5855

  • SSDEEP

    6144:9tD170Jqyr4NTjWl8Lb0SxAtD170Jqyr4NTjWl8Lb0Sx0:V70oeA0mC70oeA0m0

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

th47

Decoy

bestguy8.online

artpressonline.com

touzitest01.com

thecolorbuzz.com

xn--est572f.top

ayumandya.com

arxdigital.com

ayaretri.online

ajanseralp.com

createna.com

inquisitivemeditation.com

qhqfoq.cyou

mango369flower.com

comeherequinn.com

xvideos202216.xyz

reopdat.xyz

guosetianxiang.xyz

asynctest11.top

pineclass.com

cq4n0lrbygmgke.kred

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • JaffaCakes118_b85c4d917f9b9478ffa3b901a54b805c865506efd059adcaaa607e34648fa659