General

  • Target

    JaffaCakes118_f8b7e9c81437b7a30cdf1c51bf4067bf6a8cbf6ef7c9744b05e1b2e51d5607f1

  • Size

    188KB

  • Sample

    241225-rqfknsvpbp

  • MD5

    e8feea71a60a210b5fc6de508ec2d3e3

  • SHA1

    c092d134a6be37ec38bc433b4cf2751af70cb151

  • SHA256

    f8b7e9c81437b7a30cdf1c51bf4067bf6a8cbf6ef7c9744b05e1b2e51d5607f1

  • SHA512

    99c3e870c5ab833ed0e8550f33abfc22d752672690c7a1638aa4dd33ba0d49ddc18c7da71575509516e83048e057a4a0e25097813b1091b04419a9f70fa194c8

  • SSDEEP

    3072:K+mWkkDyfc8UVdmLj32Vg+Utx7LzBFKpl7ASmt0Mm6SvKeuE2i8ZeWZ2DYBs:KvB8QL2O+W7nBFKT60xy5ZF9

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

os56

Decoy

australianhotwaterupgrades.com

vipidplus.online

kneescooterscanada.com

pesanterkini.com

madden24gameplay.com

linkbong88moinhat.net

awongtest41saletest.com

thetravellingcatcompany.com

vazxlip.xyz

bangdemcheeks.com

passengerassistance.website

cloud4global.com

prestopizzarennes.com

midlandchambertravel.com

nashwan-d.com

bellescraftkitchen.com

teamtisdale.com

allascooussaa.us

cryptobet365.xyz

cbij.education

Targets

    • Target

      JaffaCakes118_f8b7e9c81437b7a30cdf1c51bf4067bf6a8cbf6ef7c9744b05e1b2e51d5607f1

    • Size

      188KB

    • MD5

      e8feea71a60a210b5fc6de508ec2d3e3

    • SHA1

      c092d134a6be37ec38bc433b4cf2751af70cb151

    • SHA256

      f8b7e9c81437b7a30cdf1c51bf4067bf6a8cbf6ef7c9744b05e1b2e51d5607f1

    • SHA512

      99c3e870c5ab833ed0e8550f33abfc22d752672690c7a1638aa4dd33ba0d49ddc18c7da71575509516e83048e057a4a0e25097813b1091b04419a9f70fa194c8

    • SSDEEP

      3072:K+mWkkDyfc8UVdmLj32Vg+Utx7LzBFKpl7ASmt0Mm6SvKeuE2i8ZeWZ2DYBs:KvB8QL2O+W7nBFKT60xy5ZF9

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks