General
-
Target
JaffaCakes118_22c294ff939cef3ff8550fa2c4e9c11e29a0408923c8a8b5d2be164113083b34
-
Size
188KB
-
MD5
90fcdf15b8d1f141d8f085d997c39ac2
-
SHA1
1987902558cebdc2b19ded4c7665f0b320ed8b09
-
SHA256
22c294ff939cef3ff8550fa2c4e9c11e29a0408923c8a8b5d2be164113083b34
-
SHA512
596afe96663adc663b6e340948ee7ce127626a37370b02591ba70369227d67dfe338d369a7bac0fce00a9e3368a8b0d8eb649adec5d75060ddbc241d337454e2
-
SSDEEP
3072:u3JENiyqqXCVl3oIpydChE6xjGLAVyRs5zrWFbU:vlEJooxS6xjGksKzrWFb
Malware Config
Extracted
formbook
4.1
ld23
lms22j.com
es-autentificacion.com
lottoprevisioni.com
yvw3z.xyz
womenupclub.com
phoenixeducationcentreni.com
metaversegurme.com
candymediaaa.com
virginiafamilyhealth.com
scasus.com
wide-hub.com
176218.com
huayidg.com
ticknft.site
sulfaa.com
system42.info
naturalhigh.love
taoshouyouac.xyz
lacasadeifolli.com
kotan3.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_22c294ff939cef3ff8550fa2c4e9c11e29a0408923c8a8b5d2be164113083b34
Headers
Sections