General
-
Target
JaffaCakes118_0e2f4a9bdcb29ea68ef54b3b77be3ee47f4f840250061a04410909958545e670
-
Size
188KB
-
MD5
9d46435f943652e76e3c3af68250ecde
-
SHA1
36c1b64b5ce1cc3ccdd8d0b129df4c526e32aefa
-
SHA256
0e2f4a9bdcb29ea68ef54b3b77be3ee47f4f840250061a04410909958545e670
-
SHA512
94cb86db20a5ad85e743427115dbb7c0e90e3ca8eee3deacbc810d305cf505256e8cab375f829edd8f1c56c3b971e25537f201bcd94f6c5c99032dcaac523d11
-
SSDEEP
3072:bbZ0k8eobK95d9O3xrF3qF27SF+Wir2pm6qz+dDaDd92:nXWxB607SF+W+bz4Ds2
Malware Config
Extracted
formbook
4.1
m48e
respectdebonair.com
quantumcleaningcompany.com
uuosgtrjg.cloud
yqrea.com
playpoolinyourarea.com
wegenerationrise.com
cliqnerd.com
talkingthefuture.com
photograph-fabulous.quest
oneidamotorfreight.com
cubiertasjj.com
digital-techs.info
websitedeepdive.com
pazayan.com
realtorzheng.com
katiavorobiovaphoto.site
soda4d.xyz
motka.net
rams.my.id
roseapplecottage.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_0e2f4a9bdcb29ea68ef54b3b77be3ee47f4f840250061a04410909958545e670
Headers
Sections