General
-
Target
JaffaCakes118_dfb954628f9b18b5675801f9131b33a32e4971fb45d8bcc00a9ff38c6553d478
-
Size
188KB
-
MD5
28e02a09498d61f8b3a5d7a7131c78b5
-
SHA1
4b21e7993994b05dbda109414d894786ec4ea2b4
-
SHA256
dfb954628f9b18b5675801f9131b33a32e4971fb45d8bcc00a9ff38c6553d478
-
SHA512
3871385eaa078104239fce5315396bdc3d107fb8746c914c3ee27a5a1e8237fd9611c2746452d15b4e9179896386d0889b6e7943cab4810fd9dc827dd9f18a7b
-
SSDEEP
3072:8vz6Ebpn1NTc3YmFjLb2KGI1xaqlgBJhHCNMaX0e8oEqnvozgDfzc:cndSYSjuKn1xarBeNZBEqnvozAY
Malware Config
Extracted
formbook
4.1
d1n3
scrubbinsisters.com
kawuldim.com
pyttoin.xyz
iyraproperties.com
miaurora.net
cricutonlinesales.store
huangsanguai.com
chayaelements.store
giftexpress15.xyz
antiwardrobe.com
wiggly.site
avrecommendwiki.com
galabet472.com
invtips.com
tvpoy.xyz
raidencity.net
ripper66.com
ipoyce.online
xn--h6q362bj4mp5c.com
rooplaza.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_dfb954628f9b18b5675801f9131b33a32e4971fb45d8bcc00a9ff38c6553d478
Headers
Sections