General

  • Target
    JaffaCakes118_3160c047b9618d13e12cf558fa12fd0cabaab4a36b645a05a454227fbecdc403
  • Size 188KB
  • Sample241230-bp1lfssrey
  • SHA256 3160c047b9618d13e12cf558fa12fd0cabaab4a36b645a05a454227fbecdc403
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • formbook

Version
  • 4.1

Campaign
  • h3ha

Decoy
  • ideas-dulces.store

  • store1995.store

  • swuhn.com

  • ninideal.com

  • musiqhaus.com

  • quranchart.com

  • kszq26.club

  • lightfx.online

  • thetickettruth.com

  • meritloancubk.com

  • lawnforcement.com

  • sogeanetwork.com

  • thedinoexotics.com

  • kojima-ah.net

  • gr-myab3z.xyz

  • platiniuminestor.net

  • reviewsiske.com

  • stessil-lifestyle.com

  • goodqjourney.biz

  • cirimpianti.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

File Explorer

  • JaffaCakes118_3160c047b9618d13e12cf558fa12fd0cabaab4a36b645a05a454227fbecdc403
    188KB

JaffaCakes118_3160c047b9618d13e12cf558fa12fd0cabaab4a36b645a05a454227fbecdc403

  • SHA256 3160c047b9618d13e12cf558fa12fd0cabaab4a36b645a05a454227fbecdc403
  • MD5 SHA1 SHA512 SSDEEP
  • Formbook payload

    rat