General
-
Target
JaffaCakes118_b497c6b78313deb4c526d217712c694a20e714afa9224aeaba25f6cedfc942da
-
Size
140KB
-
MD5
f98630592d9e7eb3aa46b4a602495f78
-
SHA1
2285caf219ef0a68adf1ed8cc8c74bbe4fe71ef4
-
SHA256
b497c6b78313deb4c526d217712c694a20e714afa9224aeaba25f6cedfc942da
-
SHA512
38664ae0ff847255cb60154009c029650a4efb475674cceae39e715c3978d602a934eebac8809dcdb1df5251b928de97a79802e87ae2bb08424d99412fbc5d62
-
SSDEEP
3072:QZ54HUqlNN+aUTOWdqa6zihqP6PTvCYFl4KzY3dIwYSxLEti+qXudHo:JJlNwaUbF6LCzH4KzY3dLYSxLEioI
Malware Config
Extracted
formbook
4.1
d94e
123456yudang.com
t-eros.com
genesis-urban.com
gartersnake.xyz
freshinews24.com
molasendo.com
365889.xyz
multiverso-digital.com
nahlabalmsales.com
cashyoga.space
momtipsblog.com
uktbc.xyz
hu6aecfzts33zz.life
luxuryholic.com
wtsgdy.com
bathroomrenovationscenter.club
mouradhw7.xyz
sehoonp.com
danplace.com
zc006.xyz
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_b497c6b78313deb4c526d217712c694a20e714afa9224aeaba25f6cedfc942da
Password: infected
-
0e5c9966da705047c1eb5108fd658f512adafe31f93e625b0e2c00f13999c6af
Headers
Sections