General
-
Target
ef4942c6a1878c114f57ad82ee19de69_JaffaCakes118
-
Size
696KB
-
Sample
240412-gsmfwsgc27
-
MD5
ef4942c6a1878c114f57ad82ee19de69
-
SHA1
0362825a811b6ef360ab7f1c4b1d673a65c67744
-
SHA256
924f1664b6169e8237010c409e5f7e492f406154939718ce7a6ebf24cb707e99
-
SHA512
54b28aedb89253f6950d9a806dc7576dbf7bb8f06086572dd42d6d6eaea8259ef84be99a408f353bfb081e6b4b078136405dafb02ed2f73594fc765e72f10e1a
-
SSDEEP
12288:AVp7NlA1AVnJzzW+y9QEc9Me5LhlH9u9tx7x:ALKAtJe+yWEcF19G7
Malware Config
Extracted
formbook
4.1
mxwf
orders-cialis.info
auctionorbuy.com
meanmugsamore.com
yachtcrewmark.com
sacredkashilifestudio.net
themintyard.com
bragafoods.com
sierp.com
hausofdeme.com
anthonyjames915.com
bajardepesoencasa.com
marciaroyal.com
earringlifter.com
dsdjfhd9ddksa1as.info
bmzproekt.com
employmentbc.com
ptsdtreatment.space
vrchance.com
cnrongding.com
welovelit.com
Targets
-
-
Target
ef4942c6a1878c114f57ad82ee19de69_JaffaCakes118
-
Size
696KB
-
MD5
ef4942c6a1878c114f57ad82ee19de69
-
SHA1
0362825a811b6ef360ab7f1c4b1d673a65c67744
-
SHA256
924f1664b6169e8237010c409e5f7e492f406154939718ce7a6ebf24cb707e99
-
SHA512
54b28aedb89253f6950d9a806dc7576dbf7bb8f06086572dd42d6d6eaea8259ef84be99a408f353bfb081e6b4b078136405dafb02ed2f73594fc765e72f10e1a
-
SSDEEP
12288:AVp7NlA1AVnJzzW+y9QEc9Me5LhlH9u9tx7x:ALKAtJe+yWEcF19G7
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-