General
-
Target
JaffaCakes118_78e1002548eaa8e32170fdd141ccf8ce9d662696cc22d26c275e92244e5df561
-
Size
182KB
-
MD5
53507d5f1a0dfe435ef7d81c2995f473
-
SHA1
48519b26bc7192cd7e0a6033d33163a8f5e59b95
-
SHA256
78e1002548eaa8e32170fdd141ccf8ce9d662696cc22d26c275e92244e5df561
-
SHA512
9242aa6e1ad4a8f3e942ff6809d3813baa6bc41e25a6fd40f475ae90edbc1905b64b0a1dec34266f3887fa4b40f85c695640bf7fa2c4bd48746eae6999b1e1af
-
SSDEEP
3072:sXNcgjPLe71ieAcoMgqLB/agrwTXipSbMRaokYNqDcYM1ztT:O6McotMagcmpSbMXh3
Malware Config
Extracted
formbook
4.1
iic6
screaminyourcarday.com
nbhindustriesptyltd.com
ntgmfublb.icu
bombayracks.com
phoenixlights.net
rachelamosphotography.com
leapforwards.net
sendai-salt.com
shabbychicflipsbyangelina.com
core-ol.com
canalysis.net
tybeeprohibitiontour.com
influencedarts.com
italivpn.com
newborn.today
garagedoorroundrocktx.com
participi.com
thegoddessnow.com
invesito.com
surfingnaked.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_78e1002548eaa8e32170fdd141ccf8ce9d662696cc22d26c275e92244e5df561
Headers
Sections