General
-
Target
JaffaCakes118_801c2b8b5ff96de91c57e43bbce0d7be005f0b9ff2c0be1de995917c09c22f30
-
Size
188KB
-
MD5
1f702e63cd390718188879de91ae8374
-
SHA1
f0c6ba002659bc75b019dd4699298a9702e6aeb7
-
SHA256
801c2b8b5ff96de91c57e43bbce0d7be005f0b9ff2c0be1de995917c09c22f30
-
SHA512
345ba6efee3d328b037505dcd94afaedbad06657b55f1e9c36850194e7254b41cd835a01f939a2b56409fbded6b8b04502ae08047e7531dff3a93bcf620e73a9
-
SSDEEP
3072:Pw4tkWkW4VDb05B3E1Lqg0laIA7Gbqgb8iQIy70mRSMbrfzbMDMUXyDb469:AmHvEJT0l/A7GbqgQiQAmRSMbDMDMUil
Malware Config
Extracted
formbook
4.1
mh76
healthgovcalottery.net
wenxinliao.com
rooterphd.com
bbobbo.one
american-mes-de-dezembro.xyz
mintager.com
thespecialtstore.com
wemakegreenhomes.com
occurandmental.xyz
fidelityrealtytitle.com
numerisat.asia
wearestallions.com
supxl.com
rajacumi.com
renaziv.online
blixtindustries.com
fjljq.com
exploretrivenicamping.com
authenticusspa.com
uucloud.press
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_801c2b8b5ff96de91c57e43bbce0d7be005f0b9ff2c0be1de995917c09c22f30
Headers
Sections