General
-
Target
JaffaCakes118_8224d52acbf7c3ad32a075469990f3b171f7dc793228cf70a1bb4678e1d19077
-
Size
188KB
-
MD5
6c4a55111a32910db4daac3a12993ad4
-
SHA1
26d4e6f63ddabf7cec6a17ff67528c2d9fe300e7
-
SHA256
8224d52acbf7c3ad32a075469990f3b171f7dc793228cf70a1bb4678e1d19077
-
SHA512
22f4d6a33dc7c78bec4839dee25c0b8d06b8b44cf087f64b9ba55812261b42f70a977a49244df86d30cc88849365b73173cf189ed68da0265048349917378740
-
SSDEEP
3072:SY778kdi2mvTf3qIpfiMXt/qV+h4AgqdPpxhKgEBY53PwbJwb+UIy:F0fq4fDXdqV+h4AgqHxhKTW53PwbGPIy
Malware Config
Extracted
formbook
4.1
d23n
keralalotteryresults.com
cosnerreview.com
tilcompanies.com
tokomakmurjaya.xyz
twmarketz.com
spytfyre.com
eyerafitnessapp.com
faswebs.com
hotcinfin.com
modifidecars.com
xn--rhqwesct95oo2g0ro.com
fruitfulgreenhousefacility.com
pomidor.biz
volondamasterclass.com
latexbbs.com
kkh222.com
ratted.xyz
littlejohnsinc.com
vacationdealscorp.website
bitcoinbil3arabi.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_8224d52acbf7c3ad32a075469990f3b171f7dc793228cf70a1bb4678e1d19077
Headers
Sections