General

  • Target

    0f0bc639456214392d100f9ca595842e_JaffaCakes118

  • Size

    276KB

  • Sample

    240502-2lrggsge5x

  • MD5

    0f0bc639456214392d100f9ca595842e

  • SHA1

    0604c072716a53d2a2c734c2ac9475509a92d007

  • SHA256

    8c668d6ec3c6a619342d674e6f696403bcb872342fa17d7b18642861b4c9b596

  • SHA512

    fe46034a7efbb4b1ca231afe67e8dbf0f0e0423f48855dd4c12cc45d63b073df8d443a233a79f2fd334025822a44026b39d6624043a9b9b99626886c8bf940c7

  • SSDEEP

    6144:saHus917eYaHFM/oozdz4DVVPW+ZH5IT:JDVaHFqzdgreLT

Malware Config

Extracted

Family

formbook

Version

3.8

Campaign

la

Decoy

berkahonline.net

freeplaza.net

body-femme.com

sage50c.info

cliffjumpercoaching.com

doingartwork.com

littlepioneerphotography.com

p6l8.cricket

otblandscapes.com

z7mkzh913r.biz

creteyourlife.com

webdewdesign.com

ecsyo.com

qualimont.com

420friends.net

comparatifmutuellessante.com

vierkartdfill.win

treetooost.net

sc-bdf.com

cultsofbeauty.com

Targets

    • Target

      0f0bc639456214392d100f9ca595842e_JaffaCakes118

    • Size

      276KB

    • MD5

      0f0bc639456214392d100f9ca595842e

    • SHA1

      0604c072716a53d2a2c734c2ac9475509a92d007

    • SHA256

      8c668d6ec3c6a619342d674e6f696403bcb872342fa17d7b18642861b4c9b596

    • SHA512

      fe46034a7efbb4b1ca231afe67e8dbf0f0e0423f48855dd4c12cc45d63b073df8d443a233a79f2fd334025822a44026b39d6624043a9b9b99626886c8bf940c7

    • SSDEEP

      6144:saHus917eYaHFM/oozdz4DVVPW+ZH5IT:JDVaHFqzdgreLT

    • Formbook

      Formbook is a data stealing malware which is capable of stealing data.

    • Formbook payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks