General

  • Target

    JaffaCakes118_13fe32ea1a8f34e606623e47e0da04c122e989b487365784315001d6dd7ba090

  • Size

    369KB

  • MD5

    12b1cc2d73f6dd389a925ad2944927be

  • SHA1

    31d60dd598759e34da092531c55aa13f8d13f83b

  • SHA256

    13fe32ea1a8f34e606623e47e0da04c122e989b487365784315001d6dd7ba090

  • SHA512

    020e758f5729f0c029fe4d675b65df8be8a35d159656f7debd44bc3e190f0e2fcbc316105c7aa459a2eab1658375003d2a77afb296cfa52ecec4a6f07e366520

  • SSDEEP

    6144:tNGvKeI3MMzaqPzO9tECxVef6kNGvKeI3MMzaqPzO9tECxVef6+:tNGE3MMzpoE4VetNGE3MMzpoE4VeL

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

a24e

Decoy

flormarine.co.uk

theglazingsquad.uk

konarkpharma.com

maxpropertyfinanceuk.co.uk

jackson-ifc.com

yvonneazevedoimoveis.net

baystella.com

arexbaba.online

trihgd.xyz

filth520571.com

cikpkg.cfd

jakesupport.com

8863365.com

duniaslot777.online

lop3a.com

berkut-clan.ru

lernnavigator.com

elenaisaprincess.co.uk

daimadaquan.xyz

mychirocart.net

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • JaffaCakes118_13fe32ea1a8f34e606623e47e0da04c122e989b487365784315001d6dd7ba090