General
-
Target
JaffaCakes118_4aad20480192542caecfaba10c5a70cab6a036eb47b88cb35507b0401f2b4720
-
Size
188KB
-
MD5
c2c5355c95604ba42b218622d992668f
-
SHA1
0c6899be18c8a3327462f200f9053486760c5d8d
-
SHA256
4aad20480192542caecfaba10c5a70cab6a036eb47b88cb35507b0401f2b4720
-
SHA512
905ec07798410d6f86072ebf11141f70575d7cc0ca9ce2c8811a4c874593522326f82890f0a19e7bde42529d5e20c94157ab232bd66e02b7d357bbf8e3195651
-
SSDEEP
3072:YO8BkSd+udbcd334ttkgF6puUuvZY2KoipofxUSt3RCFV4C:KdgH4Pb6puUuvZY2KoipIUGaV4
Malware Config
Extracted
formbook
4.1
v05y
vlastasamsonth.com
swankyeaters.com
digitalstar.info
katouchcommodity.com
armyworm51pud.com
shazhou.xyz
literatureforscience.com
nemitchel.com
embodiedwomanhood.com
clearoneadvange.com
cres.network
stanbicserv.com
theazted.com
trochumotorsltd.com
danielleclamare.com
solotime111.com
fancyproduct.space
starlinkinvestltd.com
famanhico.xyz
mgzz093.xyz
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_4aad20480192542caecfaba10c5a70cab6a036eb47b88cb35507b0401f2b4720
Headers
Sections