General
-
Target
e5804762a27e381585dd592dc15ffd89_JaffaCakes118
-
Size
320KB
-
Sample
240407-wckppaab3y
-
MD5
e5804762a27e381585dd592dc15ffd89
-
SHA1
79f45d7c5a0eec4e281522fe6b3c610359517a54
-
SHA256
d6759d62c64ebcfe83041fd0c336ed7e2f1d8ba44ad409de4313b0b029250ba2
-
SHA512
dbb653d8167aa5d926d6e958ce7e23adba4690b89e2da8e447c0287f9bda54482046ce666c8745b029dbb3ab1fab1a72f804b925e51c0f921f07c3139cc28f9d
-
SSDEEP
6144:JTNs2iJdoIm/MZWepYPbzXIzvkelXB+CjH4JAnRwoOL9:fsxcf/EWPIbn+CjYJARwoOR
Static task
static1
Behavioral task
behavioral1
Sample
e5804762a27e381585dd592dc15ffd89_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
formbook
4.1
otcl
lenatwo.com
alshiban.com
hotsexfreevideos.club
tfcfu.com
punealtz.com
wang0911.com
onenesstokyo.com
myshopsbuddy.com
vishalsgupta.com
simplyagrarian.com
jpruyle.com
sinnergoingtohell.com
face-pad.com
holisticworldinsider.com
rootsentertainment.net
veextechthai.com
tradeplotter.com
fothergillacademy.com
machinami-home.net
hardwareonestore.com
wanmaimedia.com
sxhuanghe.com
weekendhousehobby.com
jecnrwavl.asia
2handsrecords.com
lovespellforever.com
littlestoriesforbigchildren.com
avantchapel.com
theselftie.com
gehalobegguine.com
franchisesforyou.com
maikrioyo.com
pertinentascertain.club
ctbizmag.com
la-li-lu.com
sergrtr.com
physiquehustle.com
allandurdenforlamesa.net
premier-club.pro
practicemedschoolinterview.com
lavenderdraem.com
tksp.net
w-c727or.net
aztecaincometaxandinsurance.com
cdrob.com
vidacocktails.com
villeccomenus.com
superstring-space.com
rhai.online
nwamidwest.com
catherinestolarski.design
zapoya.net
ganjagahi.com
fadseries.com
boatharbourdevelopment.com
schuldenzaesurgesetz.info
sdtiexfhv.icu
recarreercenter.com
albaniamatrimony.com
laurenyoungateam.com
ilut-o-mat.com
focuseses.com
pecarerx.com
atlerz.com
fussionpromos.com
Targets
-
-
Target
e5804762a27e381585dd592dc15ffd89_JaffaCakes118
-
Size
320KB
-
MD5
e5804762a27e381585dd592dc15ffd89
-
SHA1
79f45d7c5a0eec4e281522fe6b3c610359517a54
-
SHA256
d6759d62c64ebcfe83041fd0c336ed7e2f1d8ba44ad409de4313b0b029250ba2
-
SHA512
dbb653d8167aa5d926d6e958ce7e23adba4690b89e2da8e447c0287f9bda54482046ce666c8745b029dbb3ab1fab1a72f804b925e51c0f921f07c3139cc28f9d
-
SSDEEP
6144:JTNs2iJdoIm/MZWepYPbzXIzvkelXB+CjH4JAnRwoOL9:fsxcf/EWPIbn+CjYJARwoOR
-
Formbook payload
-
Suspicious use of SetThreadContext
-