General
-
Target
f8e122f72847d6c6133b410dd9d06a8f_JaffaCakes118
-
Size
364KB
-
Sample
240418-2bnb3she6s
-
MD5
f8e122f72847d6c6133b410dd9d06a8f
-
SHA1
1cf6f55e113da6d0d73437575765636be7e94416
-
SHA256
21da3823ffb535bf77b19ce43b741011f3783180ab5d74e2aab69ce311ed86fb
-
SHA512
d64a811adead1bbb7f1a2b3a2d55d1089578292557274b2878b2d5f6453a9a180d244440b94acc62be60d642075c9e743d220805e94e655effc08089c2bf5835
-
SSDEEP
6144:FVyyLh9/9hNNBldy0dgpffM8SVvc+j/rz6ceAbzF62/nMeWXQN:7tb/HHBHnd4fffkco2ZAf7WX2
Malware Config
Extracted
formbook
4.1
dd2v
jkrqzmeyd.icu
cbluedottvwdshop.com
yhchen.space
premierhealthnwellness.com
szkuyaju.com
harvestmoonloans.net
dadematerial.com
mariaclarahairstudio.com
hwunvy.online
puloutjbmere.com
kossu1989.com
dubbedos.com
ncylis.com
hybrid-sol.com
travelature.com
gracefulcounts.com
66secretgarden.com
eslonyourcell.com
wisersponsorship.com
sepn3.com
Targets
-
-
Target
f8e122f72847d6c6133b410dd9d06a8f_JaffaCakes118
-
Size
364KB
-
MD5
f8e122f72847d6c6133b410dd9d06a8f
-
SHA1
1cf6f55e113da6d0d73437575765636be7e94416
-
SHA256
21da3823ffb535bf77b19ce43b741011f3783180ab5d74e2aab69ce311ed86fb
-
SHA512
d64a811adead1bbb7f1a2b3a2d55d1089578292557274b2878b2d5f6453a9a180d244440b94acc62be60d642075c9e743d220805e94e655effc08089c2bf5835
-
SSDEEP
6144:FVyyLh9/9hNNBldy0dgpffM8SVvc+j/rz6ceAbzF62/nMeWXQN:7tb/HHBHnd4fffkco2ZAf7WX2
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-