General

  • Target

    JaffaCakes118_e9724a5275ea0916c01a0e3f08322c139532f5718ebab8fda6088bac9a6f0b9a

  • Size

    369KB

  • MD5

    50bf751b5606b1f62d9395d71efa158f

  • SHA1

    f55a8534afd4957cbb7d7987179bf49a9f64ec6f

  • SHA256

    e9724a5275ea0916c01a0e3f08322c139532f5718ebab8fda6088bac9a6f0b9a

  • SHA512

    7a1be1eaa240104c8cfdcd67cc4ff3459973b4dde1fc13755854feec7ae4f1ada9e170dfa0da3da47e323f2317e06b30e9210c8e8c4b64de5c39cf05f47b1e24

  • SSDEEP

    6144:K6VPFPdAwTxTrNFIcG70i+nskT9oZ6VPFPdAwTxTrNFIcG70i+nskT9ok:tPdAaxRnNn39oAPdAaxRnNn39ok

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

nurs

Decoy

caixinhascomcarinho.com

abinotools.com

oporto-tours.com

iruos.com

yesmamawinebar.com

wwwscu.com

habit2impact.com

antigenresearch.com

ux4space.com

diarypisces.com

cryptopers.com

lovingmoreband.com

beerwars.net

ascariproject.site

livesoccerhd.info

bluestardivingschool.com

pluik.com

snorrky.space

lcoi9.com

phantomxr.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • JaffaCakes118_e9724a5275ea0916c01a0e3f08322c139532f5718ebab8fda6088bac9a6f0b9a