General
-
Target
c78d5e89ebecb4d88d3ab36bc47fd7ba_JaffaCakes118
-
Size
448KB
-
Sample
240405-b9jtfaha51
-
MD5
c78d5e89ebecb4d88d3ab36bc47fd7ba
-
SHA1
476733e0eb88a9dce2a65200c23ddd0d5f2b3496
-
SHA256
9b6b00b331ea48d5477fbd0ec6e168407dcec59c758eb797c9672d2f74dba12a
-
SHA512
a4de582e5f599ad11c60dbdb7e7ded18c004f956ec84eb379f30ebd1e83eb3fe938fab821038dcf6c1dff839b329ff85ab556fd75f54e70e332ff25415ddfddb
-
SSDEEP
12288:sJaathSy/zUhnXh1ToH4qRhTp2e3l9hradP7P:sJGy/4Ds4wEe31adP
Malware Config
Extracted
formbook
4.1
kzk9
tianconghuo.club
1996-page.com
ourtownmax.net
conservativetreehose.com
synth.repair
donnachicacreperia.com
tentfull.com
weapp.download
surfersink.com
gattlebusinessservices.com
sebastian249.com
anhphuc.company
betternatureproducts.net
defroplate.com
seattlesquidsquad.com
polarjob.com
lendingadvantage.com
angelsondope.com
goportjitney.com
tiendagrupojagr.com
Targets
-
-
Target
c78d5e89ebecb4d88d3ab36bc47fd7ba_JaffaCakes118
-
Size
448KB
-
MD5
c78d5e89ebecb4d88d3ab36bc47fd7ba
-
SHA1
476733e0eb88a9dce2a65200c23ddd0d5f2b3496
-
SHA256
9b6b00b331ea48d5477fbd0ec6e168407dcec59c758eb797c9672d2f74dba12a
-
SHA512
a4de582e5f599ad11c60dbdb7e7ded18c004f956ec84eb379f30ebd1e83eb3fe938fab821038dcf6c1dff839b329ff85ab556fd75f54e70e332ff25415ddfddb
-
SSDEEP
12288:sJaathSy/zUhnXh1ToH4qRhTp2e3l9hradP7P:sJGy/4Ds4wEe31adP
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-