General
-
Target
9416bcf98a5d728bba79b87e1aa43466_JaffaCakes118
-
Size
346KB
-
Sample
240402-xa7xwaaa59
-
MD5
9416bcf98a5d728bba79b87e1aa43466
-
SHA1
49d5ec3bcf01ad4c9927d5903b6db4acd922230e
-
SHA256
da4990bc142f92e8cff75d8394bbe43569e1f5454a10d38dca22114d2c2fa6bd
-
SHA512
bd4d1aeb0d8989cfbef253dc9c00c79b0489a0221a8ff79680f9f6e41b6c5d50d8fb3e2199c7b4c73334f08fbc7d9d0acc996f878145a110f645a7ef99586a39
-
SSDEEP
6144:HnyMQ9bXFZfl8StCt3ekRcNnFnHBNXlTEGtxhI:HyMCft23ekyzhNNVtY
Static task
static1
Behavioral task
behavioral1
Sample
9416bcf98a5d728bba79b87e1aa43466_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
formbook
4.1
s6tn
usesignature123.com
hamster-run.com
expressinsuranc.com
obitasu.net
h14-pvzn.biz
ivanroussev.com
therapeutictruth.com
kdqdl.com
emmagx.com
bidarsoft.com
midtechdynamics.com
shapelies.art
luchamasks.net
smileshippment.com
plazabd.com
vabeachfishingcharters.com
change-fit.com
dncrgroup.com
5504590.com
diverde.dental
wenandvery.com
inventivethinking.store
simontans.com
huataimba.com
generationjesus.world
galaxysupermarket.online
terapibatukmenahun.com
byklali.com
ur1d0e.com
bayburtescortx.club
ketchupbookeeping.com
worktroup.com
seatsapp.com
inelec-consulting.com
pristineroofmaintenance.com
dbzclub.xyz
yunshan-hotel.com
econstructionequipment.net
fancide.com
banytus.xyz
yulianggang.com
pysheets.com
sodo6674.xyz
sexyondfunny.com
techmaxdiscovery.com
sabeehassaf.xyz
cwkdsua.xyz
powderworksau.com
poutineswap.net
cullinangolfhotel.com
pawsinthehood.net
equine-specialties.com
1fe-pyb6.biz
yesjune.com
c3arabiasbe.com
matteobono.online
wufe.net
fashionbase.xyz
theetcollective.com
ndamud.com
motivedairy.com
kshlerindumpsterrental.com
henjieencyclopedia.com
rockfordmedicalmarijuana.com
seestainable.com
Targets
-
-
Target
9416bcf98a5d728bba79b87e1aa43466_JaffaCakes118
-
Size
346KB
-
MD5
9416bcf98a5d728bba79b87e1aa43466
-
SHA1
49d5ec3bcf01ad4c9927d5903b6db4acd922230e
-
SHA256
da4990bc142f92e8cff75d8394bbe43569e1f5454a10d38dca22114d2c2fa6bd
-
SHA512
bd4d1aeb0d8989cfbef253dc9c00c79b0489a0221a8ff79680f9f6e41b6c5d50d8fb3e2199c7b4c73334f08fbc7d9d0acc996f878145a110f645a7ef99586a39
-
SSDEEP
6144:HnyMQ9bXFZfl8StCt3ekRcNnFnHBNXlTEGtxhI:HyMCft23ekyzhNNVtY
-
Formbook payload
-
Drops startup file
-
Suspicious use of SetThreadContext
-