General
-
Target
JaffaCakes118_ba6ebefbd5fcf9495dd6fe2bc099432fc1a0b5186c1c9fc7f24cf45d4eff42f9
-
Size
188KB
-
MD5
d0aa337f11e0b3ef0162d019a0cd26f9
-
SHA1
b7242367b014e56aee8af7300e3ab14202582996
-
SHA256
ba6ebefbd5fcf9495dd6fe2bc099432fc1a0b5186c1c9fc7f24cf45d4eff42f9
-
SHA512
3bb76d70d0062bad72b07ee53a28d7a914a8388373f9d4a8865050e63a1dffcc20dd3b878f65235dc6741f3cf1aa52398eb2919e197877ff4fa98271796811a2
-
SSDEEP
3072:garUEDkqR7KpiMV3sOavLpwLlZwTKio2+7+kz9YRPazD0gW:npM5slSLlZwTKnhaRC
Malware Config
Extracted
formbook
4.1
sg62
postenr.com
hh11z.top
datasysperformance.site
cyber-xpert.com
cybearvisual.com
topgkeychins.com
koshdental.com
ag-bathrooms.com
fidgetninjaz.com
cistanbulc.net
synabilisim.com
cocotototutu.xyz
cyberressm.com
tournest.info
drymixsubstrate.com
imsooverthisshit.com
totaleliteme.com
orientalgemco.online
dwpohy-2wps.click
graceresurrection.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_ba6ebefbd5fcf9495dd6fe2bc099432fc1a0b5186c1c9fc7f24cf45d4eff42f9
Headers
Sections