General
-
Target
JaffaCakes118_fefa6ba1f04ce186d7835ec86a9e4aa9f7e5f2cc6b414d45f307cfc1496daaf3
-
Size
188KB
-
MD5
583a27ed8f9a1c7a8a88ab86662429be
-
SHA1
e74956de995dd79dce4e9ae3fd93f478c3466dd7
-
SHA256
fefa6ba1f04ce186d7835ec86a9e4aa9f7e5f2cc6b414d45f307cfc1496daaf3
-
SHA512
a659dd18f888ba0455cfba41726729716951ba058cefb2d5b77b18ee1f62ec93da986eff7b24753cec627ca2bdf87cde436e4185fb9f31b2e43842902b375a43
-
SSDEEP
3072:YY5akrY/oxbxg3W75Z9ibpu5+BBB3yXylhwr/tLoWQiedwY5JJ:sOuWNybpu5+J3yilU/tLDQHr
Malware Config
Extracted
formbook
4.1
sf31
boukilio.com
dev-jitsi.com
boredfoundation.com
divorceattorneypros.com
huayueemc.com
idknft.com
vanquishing-venture.com
sapientquiz.online
centraldisastercleanup.com
speechanddebateacademy.com
alexisbyter.com
harborcityconstruction.net
designerlightingdesign.com
hettonlehol.xyz
shoptawny.com
mytinnitustherapy.com
gongyang-shop.com
biztools.digital
lasciencepourtous.com
freelancers-hub.agency
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_fefa6ba1f04ce186d7835ec86a9e4aa9f7e5f2cc6b414d45f307cfc1496daaf3
Headers
Sections