General

  • Target

    JaffaCakes118_ba6ebefbd5fcf9495dd6fe2bc099432fc1a0b5186c1c9fc7f24cf45d4eff42f9

  • Size

    188KB

  • Sample

    241229-qxs9nsspdw

  • MD5

    d0aa337f11e0b3ef0162d019a0cd26f9

  • SHA1

    b7242367b014e56aee8af7300e3ab14202582996

  • SHA256

    ba6ebefbd5fcf9495dd6fe2bc099432fc1a0b5186c1c9fc7f24cf45d4eff42f9

  • SHA512

    3bb76d70d0062bad72b07ee53a28d7a914a8388373f9d4a8865050e63a1dffcc20dd3b878f65235dc6741f3cf1aa52398eb2919e197877ff4fa98271796811a2

  • SSDEEP

    3072:garUEDkqR7KpiMV3sOavLpwLlZwTKio2+7+kz9YRPazD0gW:npM5slSLlZwTKnhaRC

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

sg62

Decoy

postenr.com

hh11z.top

datasysperformance.site

cyber-xpert.com

cybearvisual.com

topgkeychins.com

koshdental.com

ag-bathrooms.com

fidgetninjaz.com

cistanbulc.net

synabilisim.com

cocotototutu.xyz

cyberressm.com

tournest.info

drymixsubstrate.com

imsooverthisshit.com

totaleliteme.com

orientalgemco.online

dwpohy-2wps.click

graceresurrection.com

Targets

    • Target

      JaffaCakes118_ba6ebefbd5fcf9495dd6fe2bc099432fc1a0b5186c1c9fc7f24cf45d4eff42f9

    • Size

      188KB

    • MD5

      d0aa337f11e0b3ef0162d019a0cd26f9

    • SHA1

      b7242367b014e56aee8af7300e3ab14202582996

    • SHA256

      ba6ebefbd5fcf9495dd6fe2bc099432fc1a0b5186c1c9fc7f24cf45d4eff42f9

    • SHA512

      3bb76d70d0062bad72b07ee53a28d7a914a8388373f9d4a8865050e63a1dffcc20dd3b878f65235dc6741f3cf1aa52398eb2919e197877ff4fa98271796811a2

    • SSDEEP

      3072:garUEDkqR7KpiMV3sOavLpwLlZwTKio2+7+kz9YRPazD0gW:npM5slSLlZwTKnhaRC

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks