General
-
Target
JaffaCakes118_5184a27267c6606cf903b25197a4bca3c20d0236fa1bd8b5e13501b0defba04d
-
Size
188KB
-
MD5
2a75024593947323ab4a0b0635e6dd53
-
SHA1
00f72ffc06619895ca1e88f1b1a126387a01e7da
-
SHA256
5184a27267c6606cf903b25197a4bca3c20d0236fa1bd8b5e13501b0defba04d
-
SHA512
d3a2b1970479fb303e7b3c41beffc33c89456fa2e6323904ded5395c099cbc12a5f3f5084394fad018780353a42f888f4587b4e2827fdba2819413bb530f25d6
-
SSDEEP
3072:/x09AE2YDwEOHm3UZLjGNh5B5J7B2Bvnd/GS9J:g0Y2QURjU5B5J7B2veQ
Malware Config
Extracted
formbook
4.1
w26e
alexispageart.com
69253.win
luckytimelondon.com
289788.icu
houserepairservice.com
z-i-z.com
onlinediyetsitem.com
birkinmetaverse.com
unual.com
doorbundle.com
unplugpropertymanagement.com
go-fastcargo.com
therestore.agency
rubyyyjones.com
bavtin.xyz
jktwatchweek.com
atendimento-app.cloud
inavi.xyz
topinsurancesecrets.com
webgplsolucoes.xyz
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_5184a27267c6606cf903b25197a4bca3c20d0236fa1bd8b5e13501b0defba04d
Headers
Sections