General
-
Target
JaffaCakes118_19371849e7653a46a4dcdb4c450ff8c23deb04afa8b0ca60a636f4e17b2d3157
-
Size
188KB
-
MD5
60f743d8de501e4d581ab878ed18fb64
-
SHA1
f64e15b301e6c3d50d67a2db34c06f01cecd5a8e
-
SHA256
19371849e7653a46a4dcdb4c450ff8c23deb04afa8b0ca60a636f4e17b2d3157
-
SHA512
63e1e9521cc781c943263fb6f2a64df83047cce87ab46ec5a41c1c1105696649c686f8908d921fd774e6f0966d34ff41ea8531b76ac2244ba4efc9536e8a9b5e
-
SSDEEP
3072:+2zelskZe9hDLTU3uMNquQ+xqv9Edo995xzQClHkwDJPj0:4mX6uwJqv9EdS9566ESJP
Malware Config
Extracted
formbook
4.1
g2y4
newglabspharma.com
xn--sampoernaslt-bib.com
diabetes-treatment-48790.com
yjtiaddcart.site
forcathyou.xyz
qwjsk.com
phygitalbcn.tech
depvem.online
joinworking.com
takebackarkansas.com
pulseminers.com
xds5nf6h.com
fortags.com
amrumi.com
ultimatecores.com
indilluad.com
caulkingandcoating.com
comunidadintegral.com
organixonly.com
gardenofbeautyhtx.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_19371849e7653a46a4dcdb4c450ff8c23deb04afa8b0ca60a636f4e17b2d3157
Headers
Sections