General
-
Target
JaffaCakes118_5e9d25ced590e7b1d9c596df8c50e1e93bf79b2f5a0caddf7ae507c7e26702e3
-
Size
188KB
-
MD5
c60c6c9cbcb465716d73409cd7b880ce
-
SHA1
03408a326526ff3f9e7c367ac1dfbcfc2f803961
-
SHA256
5e9d25ced590e7b1d9c596df8c50e1e93bf79b2f5a0caddf7ae507c7e26702e3
-
SHA512
fce066a7609b91cc8eda9edb971b7a27f6f014dccbc83cf6aae8e8ad68bda07e9fcd0ced2b9b2187beeb3eea8980b62b1fe51f58a887494f119c8d1af6065aa3
-
SSDEEP
3072:bMFjkjeBCrdqD3rwD8x5KSXZCFr1XFkFeHPLAaiOuspO/jDvKa:SVrruQKSXZCBVZY7DC
Malware Config
Extracted
formbook
4.1
b11y
fasttracktoblessings.com
huanjitec.com
sqlshades.com
wukongnft.xyz
dactylus99sis.com
xcellence.realestate
scottearlshop.online
hys-fj.com
mvewee.xyz
xuanjiyan.com
jillamos.com
uhyiuhiuh6789.xyz
chicombatsystemwaddon.com
getcashsolarsystemwebstore.com
dinovtie.com
brand-new-thing.com
okccedu.com
dvdnyheter.com
pandappm4u.com
campfifty.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_5e9d25ced590e7b1d9c596df8c50e1e93bf79b2f5a0caddf7ae507c7e26702e3
Headers
Sections