General
-
Target
JaffaCakes118_edfe6c8901b6215bad0f048d19e3fa86be0b499d479ff46e7bd04be349f633ba
-
Size
188KB
-
MD5
af4ed7ee8a23046feb534bd7665b6416
-
SHA1
bccf7c011c49ce2e54063f371ee57bf8534b020e
-
SHA256
edfe6c8901b6215bad0f048d19e3fa86be0b499d479ff46e7bd04be349f633ba
-
SHA512
d458d4f6d20f44c50807b561d36174c5d975a6be29035c8ba5d6629cd85a2bf5c8bf821631bb47caa425e8a30676329d64d8bbcee2577b6baba7ff858fba3037
-
SSDEEP
3072:4Ww4k6pt9PG+y3TiQO0Ml9aaIYYAzzzqFm8bA32itrEVTHYj5:/BvkTLOn9aaIYY2zSmMvgJj5
Malware Config
Extracted
formbook
4.1
e0l9
packingfairturkiye.com
khenonline.com
mydactil.online
coriliechty.com
canadazk.com
freeloanseva.com
successvideo.today
infinitelifetransformations.com
unicryptdoge.com
ecolifeco.com
luxefashionaire.com
lqctqtal.xyz
liveexim.com
happyhempbakery.com
paypalverifie.com
wingonvacations.com
flawdogs.com
shalomsingapore.com
ruscc.xyz
yaxi868.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_edfe6c8901b6215bad0f048d19e3fa86be0b499d479ff46e7bd04be349f633ba
Headers
Sections