Overview

overview

10

Static

static

10

JaffaCakes...a6.exe

windows7-x64

1

JaffaCakes...a6.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_2646aeaf3493dbbebce1da0c2925251329ef17302c856b5a817f111e2c4541a6

  • Size

    188KB

  • MD5

    637215705b675ab8085537c2b48186d4

  • SHA1

    6db16c716b58c1988e74046add8707ccd9f94f17

  • SHA256

    2646aeaf3493dbbebce1da0c2925251329ef17302c856b5a817f111e2c4541a6

  • SHA512

    95f72a0e43eddbda7e1f28f35b040936e0aa641df177ce506ff6547c33fd1e4c6bb87f75ed85232a60ab3ebd6e7315283dd6b321a21ef5aab1e557c10807eb06

  • SSDEEP

    3072:1wm56kFkOEQ3+E13JDQjVZq5Q/3Rdlz8skm/x3Lp57mp2j:oqZJsvq5Q/3Rdaskm5bb7mU

Score
10/10
ratsn31formbook

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

sn31

Decoy

matsuomatsuo.com

104wn.com

bolacorner.com

dawonderer.com

yourpamlano.xyz

mtzmx.icu

lepakzaparket.com

barmagli.com

danta.ltd

marumaru240.com

people-centeredhr.com

test-brew-inc.com

clairvoyantbusinesscoach.com

aforeignexchangeblog.com

erentekbilisim.com

gangqinqu123.net

defiguaranteebonds.com

thegioigaubong97.site

vaoiwin.info

vcwholeness.com

Signatures

  • Formbook family
    formbook
  • Formbook payload 1 IoCs
    rat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_2646aeaf3493dbbebce1da0c2925251329ef17302c856b5a817f111e2c4541a6
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections