General

  • Target

    JaffaCakes118_23507cab0270530efc69c700b2e8b53c24c5170e2b98bd5ea7f850c2e0c0a1fd

  • Size

    188KB

  • MD5

    b343b7c31cf4b63516ff441fed159569

  • SHA1

    79f9e59d8aba9e5222bb929e57ea79034c32155d

  • SHA256

    23507cab0270530efc69c700b2e8b53c24c5170e2b98bd5ea7f850c2e0c0a1fd

  • SHA512

    d9ce94a975f842c6228905ca6f459ef27053de4aa5044ad221c08ef744f11f3f11d20084b06a128e5b0cf2958e759179a5082ada50e23aa64886ce24efcf10fb

  • SSDEEP

    3072:FSTESfYgg5xWfHZOKsl73DnipYSnAFfUsFQSk/:KyWvMKS3DnmzARc

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

xm33

Decoy

derihunter.africa

ib-online.live

ellipchenko.ru

bpjzcw.info

localsresource.com

culligandly.com

kathador.com

clarahairr.com

mayfair.africa

bungeglobalsa.biz

baycountyhomesource.com

homes24design.com

simpleusdt.net

ajamanagementgroup.net

headphones-70882.com

zjgrgy.com

2402.voto

rentalsnearballstate.com

drinkcroatian.com

fetcherror.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • JaffaCakes118_23507cab0270530efc69c700b2e8b53c24c5170e2b98bd5ea7f850c2e0c0a1fd