General
-
Target
JaffaCakes118_6b59f12ffe3770708604b8ae3bd1201a84d1b969d53236fa345521c1283d6685
-
Size
18.3MB
-
MD5
1f547b58b2b31d9d6d526fb9e8e5835e
-
SHA1
6cc3b2de6d135cf00fbd907f6d2d170cf8811d4e
-
SHA256
6b59f12ffe3770708604b8ae3bd1201a84d1b969d53236fa345521c1283d6685
-
SHA512
14d1d575f485597eefde8db1addb0e7d175559e3a677cb25042f6fcd2eb3f6f0c01fc7b48b9becf96dbcc43f4e8d11215467566582f4fbf23c5d78c1ca45bad8
-
SSDEEP
3072:7F9EUGkuaXxjj2n50uehBk5L/zXAL79e/DsnycwBTtCIY7ssA:okjQ5neb2L/LA00wOI+
Malware Config
Extracted
formbook
4.1
a18a
scuolaviamoscatimameli.com
namoro-virtualsaquibra.com
nanotechclothing.com
3w2mtj7b.xyz
elevancehnealth.com
accountantsoftwares.com
garmoshka-samouchitel.com
theindigostudio.com
chattanoogagpo.com
eizunecoskin.com
dingshounongzi.com
kcysj.com
d3artshop.com
199ty.com
vicmargo.com
fenceproviders.com
v4242.com
eastendphysicist.com
onlineleadsdirect.com
tworiversreflexology.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_6b59f12ffe3770708604b8ae3bd1201a84d1b969d53236fa345521c1283d6685
Headers
Sections