General

  • Target

    JaffaCakes118_7cb1e2df6a8dac3cf743c5779eb1f8f3923902b9937829936011a89e4a475010

  • Size

    18.3MB

  • MD5

    1cf15471c054c0cc688c65abb50e194f

  • SHA1

    eaa6815456607361979c6b81b7738abc2cfafcef

  • SHA256

    7cb1e2df6a8dac3cf743c5779eb1f8f3923902b9937829936011a89e4a475010

  • SHA512

    cfc80b0ae5bae3cf5e10e11eca52e5208c8690cde0c129d0d6b0326825665bd5fe97b805012713bea26c67885f03ce2f79e8d13d1a49df42b87d7870decc1a80

  • SSDEEP

    3072:L/v9tktj9j4m134LUvYvaq8469qz0yr9egAs8engu0rhiXK3:7kTZ4gvYyq8F9q4Mis8env1K3

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

m4r8

Decoy

laciaramasline.com

bostonblingz.store

aprenderbonito.com

worldcafegroup.com

femelopers.com

mcbzd.com

metrologisticsservice.com

gisellemontgomery.xyz

helpsforukraine.com

truckard.com

sheikhspear.media

cookware50end.com

flye.xyz

pharmsteri.com

luwei-chem.com

xianhsou.com

atechmind.com

cecgestaorh.com

triliumnotes.com

celebrationtableartistry.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_7cb1e2df6a8dac3cf743c5779eb1f8f3923902b9937829936011a89e4a475010
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections