General

  • Target

    JaffaCakes118_bb4501a528fe028d563580c307e6f8171c641badf1e1db704520c1acc92787ca

  • Size

    369KB

  • MD5

    3c1f6f45056364e2db77ae6442f82f1d

  • SHA1

    70c6b7aecad4f809459b059dbf455c587ad11b09

  • SHA256

    bb4501a528fe028d563580c307e6f8171c641badf1e1db704520c1acc92787ca

  • SHA512

    f01139d4461a44a5ca3b921fd693f7c84360d638fa03339f45da54ef33b334b04214c1acd7276dc19772b2e42104b426475d3a59005054f70a793b122eec0137

  • SSDEEP

    6144:SQtDREKXLvpVDz9egYUMQtDREKXLvpVDz9egYUh:NDR/HFfTDR/HFfh

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

pl63

Decoy

vrf11i.fun

eltway.com

onlinepaisekaise.com

salwanschooltimepass.xyz

xn--rippl-8ra.com

luckynail.net

578008.xyz

strictlysaillongbeach.com

wziuk.com

bestchessboards.com

journeyconcert.net

the-loft.shop

amgoca.top

farmasp.com

latinjock.com

seccure.cloud

ericsbland.com

msgclk.com

homebuyer.website

zhejxy.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • JaffaCakes118_bb4501a528fe028d563580c307e6f8171c641badf1e1db704520c1acc92787ca