General
-
Target
6ec2bba3fd55f0c99085d50f3b4a5c16_JaffaCakes118
-
Size
496KB
-
Sample
240401-ltevnabe57
-
MD5
6ec2bba3fd55f0c99085d50f3b4a5c16
-
SHA1
2cfb9dc306478ee5a4de2e2fda218f81d36a04d7
-
SHA256
ee0d275c50b493cc73f73d19665d9b126e038a7ea1307043eb71442280f6bd7d
-
SHA512
e5cb2c2b5cb410628e5c9ceda8fd4fb7e4363f8fa7c03eddd41f7a1177a8e8bd55230e024da2fb79e9bb16354723dc2ed676ae3ba0673e75e0e7a1f072685ae0
-
SSDEEP
12288:jJIwJ5cEc1GtnQ3em/pQdv+BMDhczlw6xJd1e27WndAc:ruVemxQlEMwNJx72
Malware Config
Extracted
formbook
4.1
mxwf
orders-cialis.info
auctionorbuy.com
meanmugsamore.com
yachtcrewmark.com
sacredkashilifestudio.net
themintyard.com
bragafoods.com
sierp.com
hausofdeme.com
anthonyjames915.com
bajardepesoencasa.com
marciaroyal.com
earringlifter.com
dsdjfhd9ddksa1as.info
bmzproekt.com
employmentbc.com
ptsdtreatment.space
vrchance.com
cnrongding.com
welovelit.com
Targets
-
-
Target
6ec2bba3fd55f0c99085d50f3b4a5c16_JaffaCakes118
-
Size
496KB
-
MD5
6ec2bba3fd55f0c99085d50f3b4a5c16
-
SHA1
2cfb9dc306478ee5a4de2e2fda218f81d36a04d7
-
SHA256
ee0d275c50b493cc73f73d19665d9b126e038a7ea1307043eb71442280f6bd7d
-
SHA512
e5cb2c2b5cb410628e5c9ceda8fd4fb7e4363f8fa7c03eddd41f7a1177a8e8bd55230e024da2fb79e9bb16354723dc2ed676ae3ba0673e75e0e7a1f072685ae0
-
SSDEEP
12288:jJIwJ5cEc1GtnQ3em/pQdv+BMDhczlw6xJd1e27WndAc:ruVemxQlEMwNJx72
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-