General

  • Target

    JaffaCakes118_db2c8413ccadf7e0bd802bca6cf5da6cc72a21197c70be43de65c9dab3dad4d3

  • Size

    369KB

  • MD5

    bd8bb5b06a72dd34499c949165217ea7

  • SHA1

    894870fddd5ae60b30d05a02f0acd7a9221f2b98

  • SHA256

    db2c8413ccadf7e0bd802bca6cf5da6cc72a21197c70be43de65c9dab3dad4d3

  • SHA512

    2f624c41f5e3a4f170616144c4ffb76cb788aa2deafb6c7ef54abe3a83d92bb75515381575dafa7e96d452e6374b936811c29d853e6427bc443badc0b341a5c6

  • SSDEEP

    6144:0H63siUlGaXI9Baquh3a+YmwcH63siUlGaXI9Baquh3a+Ymwz:AiQ9QaT3a+YXIiQ9QaT3a+YXz

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

g2fg

Decoy

snowcrash.website

pointman.us

newheartvalve.care

drandl.com

sandspringsramblers.com

programagubernamental.online

boja.us

mvrsnike.com

mentallyillmotherhood.com

facom.us

programagubernamental.store

izivente.com

roller-v.fr

amazonbioactives.com

metaverseapple.xyz

5gt-mobilevsverizon.com

gtwebsolutions.co

scottdunn.life

usdp.trade

pikmin.run

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • JaffaCakes118_db2c8413ccadf7e0bd802bca6cf5da6cc72a21197c70be43de65c9dab3dad4d3