General
-
Target
JaffaCakes118_4f2696e1f2d66f23785045b104f711452150f15ad5bfa08c723eef07b5ab261f
-
Size
188KB
-
MD5
0f745f78ac77ab6c29d09cd3fd906a77
-
SHA1
3443ce39134e676db77c8535b2ef852e32c70a15
-
SHA256
4f2696e1f2d66f23785045b104f711452150f15ad5bfa08c723eef07b5ab261f
-
SHA512
b82f8052b29567ba4feecc1b257e19d2ef50aa77515067e738aafc91dd8f0a38c45e4fa67cc5a580d6045f85c8e86f916ce2c1329ee39f2965337729e2f206df
-
SSDEEP
3072:Q1gjkLJ9gu95Khn3smAhZww6wMJYBdhxvKcrISkOsJUE8:E9gP3svh2w6wMJYDIDOid
Malware Config
Extracted
formbook
4.1
as31
satunusanet.com
intro3.xyz
000point.xyz
woreruq.xyz
yoursinglesnetwork.club
zdcqne.cfd
kkbtt.net
aflm1.com
slayback.net
metaverseuropeen.com
teng74.com
insgoat.com
willowgrovecoaching.com
pacwest.com.co
adleadz.info
ericanilsen.com
xdfgoiumk.site
oriondistribution.net
welltempered.xyz
futamatagawa-ekimae-shika.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_4f2696e1f2d66f23785045b104f711452150f15ad5bfa08c723eef07b5ab261f
Headers
Sections