General

  • Target

    JaffaCakes118_5d8b71d0ebe58cf40d7379b224c2c0e4a830e212ea4f10f2f1b08231459c56d3

  • Size

    369KB

  • MD5

    2168554bca094f2b6f73762fa5f234c6

  • SHA1

    19dc2c45427e447026e31777a06f1fe82fed33d5

  • SHA256

    5d8b71d0ebe58cf40d7379b224c2c0e4a830e212ea4f10f2f1b08231459c56d3

  • SHA512

    720c857f99a54b406263e24c10b24e2581a9994f87aa20c5a7560f5059d068cacb82008d76157919071336131665ef9164dfa8c1df98949e35a31339e2f487e4

  • SSDEEP

    6144:EH63siUlGaXI9Baquh3a+YmwcH63siUlGaXI9Baquh3a+Ymwz:wiQ9QaT3a+YXIiQ9QaT3a+YXz

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g2fg

Decoy

snowcrash.website

pointman.us

newheartvalve.care

drandl.com

sandspringsramblers.com

programagubernamental.online

boja.us

mvrsnike.com

mentallyillmotherhood.com

facom.us

programagubernamental.store

izivente.com

roller-v.fr

amazonbioactives.com

metaverseapple.xyz

5gt-mobilevsverizon.com

gtwebsolutions.co

scottdunn.life

usdp.trade

pikmin.run

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • JaffaCakes118_5d8b71d0ebe58cf40d7379b224c2c0e4a830e212ea4f10f2f1b08231459c56d3