General

  • Target

    JaffaCakes118_425a37bbc64e22fbc648920b3f5ed858cf390458de9db0d174d8eb13d4b94815

  • Size

    188KB

  • Sample

    241224-cazw2sykgy

  • MD5

    a0cde13f6429b22fc9e56d6592a2be0c

  • SHA1

    8ed3236459d1f469f868ef8504b2f1be3c5fce99

  • SHA256

    425a37bbc64e22fbc648920b3f5ed858cf390458de9db0d174d8eb13d4b94815

  • SHA512

    58ec481f9018a282210174d95d118d27450e74ac34db534fead85f8b40b5f5a7233b49b08febdbc298f972430e745d9ae660bf5d5efe5277700eb30b62329a6c

  • SSDEEP

    3072:w/ZEk1+P48A3Ib+cyupibd9lrwVPU2bnMtyemydl8/D9b+rw:4aOI6UpibdjIU27MtyXyww

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

m21d

Decoy

ffewv.com

romarg.investments

icoproject.net

syrexol24.xyz

tyxa0.xyz

worktime.website

oilysquat.sbs

hainihaoxx.top

apimarts.com

agorainvestmentscc.com

happyhorsegear.com

373145.uk

3commerce.net

2561havensdr.info

thesolosearcher.com

gwo888.com

luxefofriend.site

ascendarrays.com

diorbear.com

newsforthecolumbiagorge.net

Targets

    • Target

      JaffaCakes118_425a37bbc64e22fbc648920b3f5ed858cf390458de9db0d174d8eb13d4b94815

    • Size

      188KB

    • MD5

      a0cde13f6429b22fc9e56d6592a2be0c

    • SHA1

      8ed3236459d1f469f868ef8504b2f1be3c5fce99

    • SHA256

      425a37bbc64e22fbc648920b3f5ed858cf390458de9db0d174d8eb13d4b94815

    • SHA512

      58ec481f9018a282210174d95d118d27450e74ac34db534fead85f8b40b5f5a7233b49b08febdbc298f972430e745d9ae660bf5d5efe5277700eb30b62329a6c

    • SSDEEP

      3072:w/ZEk1+P48A3Ib+cyupibd9lrwVPU2bnMtyemydl8/D9b+rw:4aOI6UpibdjIU27MtyXyww

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks