General
-
Target
JaffaCakes118_f8ed71224775678206d1741da4e350d477face82a0b82b4e40dd7f5c7aaede2e
-
Size
188KB
-
MD5
e48cfcbf233fa65ba41c9164821d3624
-
SHA1
f46b4063293256c6b816f962d5a7c52ab3428f17
-
SHA256
f8ed71224775678206d1741da4e350d477face82a0b82b4e40dd7f5c7aaede2e
-
SHA512
d8a08f12ec9a59f716b270fee763d7895a1dbb42e1d269727445e7e39dbab05644a529c92308f3656d1d0e3a769690e94e9d2c91f96c3f4d2782f223f59248de
-
SSDEEP
3072:a+l0k3Kq+fgtz33jpsMvQVbGC/e4SE8nAr4PuAkC2Eown5tpIxAO:Eib3KMObGC/e47N1c2x
Malware Config
Extracted
formbook
4.1
b3n1
alexandragrows.com
shellload.com
stanleyrorke.com
glasurit.us
facebookismetaverse.com
astoundingaffairs.com
facom.us
dysonsaleoutlet.us
obtengaunitedhealthcare.com
sebastianroofrepairs.com
saltvent.com
littleonesclub.com
webamazoncardshopmail.xyz
lutam.xyz
myfirstpsgame.com
comline.cloud
valueinsightfororacle.com
congregacionansestral.com.co
paypal-uk.xyz
facebookversuzmeta.com
Signatures
-
Formbook family
-
Formbook payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_f8ed71224775678206d1741da4e350d477face82a0b82b4e40dd7f5c7aaede2e
Headers
Sections