General

  • Target

    JaffaCakes118_54e48fd0a712299d6c58e6265aa25c1d2e9e946d7eb2282ac7510e72a795c978

  • Size

    188KB

  • MD5

    d4e975531cf60a2c867a940d5683c9dc

  • SHA1

    18e37d31252155e01b91e65d8d428d3a181f4e7e

  • SHA256

    54e48fd0a712299d6c58e6265aa25c1d2e9e946d7eb2282ac7510e72a795c978

  • SHA512

    54c1c14435e96fc3778edee85361146110b77c7b917f96a556e1ca40265ccc5836b5449672f1e2301b166999736e5b8c8f5e3ce699bc7f514dc716450d02dc15

  • SSDEEP

    3072:3zZKklDsqWlea3oNgazqqBgrwmQalNlvaidcN1QuoFNbg+4t:LZcoaXqBgrlnJv3Y1iFNbMt

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

183b

Decoy

textilestyle.online

decorarteperu.com

commonsensedigitalmarketing.biz

yumkb.com

brambletonsummercamp.com

fug.life

grandforest.space

opmbettersvault.com

rheintv.com

blagodatbilja.store

maxpw.com

vital-roots.com

lotte-finance5.com

socalcrypto.network

extra-pays.site

mmaster.xyz

electriccarsinfohubs.com

qshid.life

digitalqp.com

golfsaudiarabia.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_54e48fd0a712299d6c58e6265aa25c1d2e9e946d7eb2282ac7510e72a795c978
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections