General
-
Target
0485b82d63f7ad0fcf8fb8cad375d27c_JaffaCakes118
-
Size
531KB
-
Sample
240328-nl2essha88
-
MD5
0485b82d63f7ad0fcf8fb8cad375d27c
-
SHA1
cd5a1c7eac16d6de771d82aafc0b88d3446dcd51
-
SHA256
51d534b716e35b643ac2a4aa73effe9607abfc61a36b7b4a423c9383002b755e
-
SHA512
b18d8513051ba56a4e3a0b8fdf0ade811ea0fe7636cd1d910f0c6bfad8def2c8062f5aa360ff48f8ecdc8534885accc510d98e67d6e7443f178e23549e608a98
-
SSDEEP
12288:dMTWwo00fX2qu4YENqlj4aYbwAA1dju0WEIdRBCQaPOonyLQSB:dio00PW4DUwEAA1qDBCQsOo0B
Malware Config
Extracted
formbook
4.1
mxwf
orders-cialis.info
auctionorbuy.com
meanmugsamore.com
yachtcrewmark.com
sacredkashilifestudio.net
themintyard.com
bragafoods.com
sierp.com
hausofdeme.com
anthonyjames915.com
bajardepesoencasa.com
marciaroyal.com
earringlifter.com
dsdjfhd9ddksa1as.info
bmzproekt.com
employmentbc.com
ptsdtreatment.space
vrchance.com
cnrongding.com
welovelit.com
Targets
-
-
Target
0485b82d63f7ad0fcf8fb8cad375d27c_JaffaCakes118
-
Size
531KB
-
MD5
0485b82d63f7ad0fcf8fb8cad375d27c
-
SHA1
cd5a1c7eac16d6de771d82aafc0b88d3446dcd51
-
SHA256
51d534b716e35b643ac2a4aa73effe9607abfc61a36b7b4a423c9383002b755e
-
SHA512
b18d8513051ba56a4e3a0b8fdf0ade811ea0fe7636cd1d910f0c6bfad8def2c8062f5aa360ff48f8ecdc8534885accc510d98e67d6e7443f178e23549e608a98
-
SSDEEP
12288:dMTWwo00fX2qu4YENqlj4aYbwAA1dju0WEIdRBCQaPOonyLQSB:dio00PW4DUwEAA1qDBCQsOo0B
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-