General
-
Target
28adf2e4dcd354d59a63e52a362750a3_JaffaCakes118
-
Size
480KB
-
Sample
240509-g29msagh93
-
MD5
28adf2e4dcd354d59a63e52a362750a3
-
SHA1
79c5d1240daa8250b38433c5c6c06360ed2d1d02
-
SHA256
532b875f09991cdf7b57db59f0f7aa579d49b229d65ad1ace9f67bf6ffc7bca5
-
SHA512
d48f37f38642fc3998aa0cc8100144ead93d81ff2fddee7816e0248c54976141871ac1e7cf415912d0f2ce1f40a5e9008dbf0576cd1c1b207706fe760a857f6d
-
SSDEEP
12288:CD1QXaV8sNRth4NevW9DrKhhiV59W5DBJLx9NU3uV:AlLXdPhQVe
Static task
static1
Behavioral task
behavioral1
Sample
28adf2e4dcd354d59a63e52a362750a3_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Extracted
formbook
4.1
cbsxx
i3w46yd-e8p36.com
vikingworrier.com
ytsunyea.com
staceyandkevin.com
vanwheel.com
insurancenashvillegeorgia.com
ikumou-pro.com
motivacaodigital.com
beypk.com
tekyildizgroup.com
nguyentruongphi.com
impalagoldcollective.com
uknus.net
xn--cjrz24b9ma835a.com
militaryeducations.com
hcszyz.com
frymanswelding.com
064415.com
lianyunbi.com
fishofthenet.com
laurymua.com
alphaprestigecars.com
magnumonlinetraining.com
credittrustb.com
0468.ink
updatemymovies.com
leemengistu.com
timn4-r.net
streetdreamsmd.com
julianaemaxwell.com
ngment.com
matzls.info
30-under-30.com
homesteadwebsites.info
kunnuoshiye.com
northcapital-holding.com
nnfzgs.com
guantianwa.com
qavxlk.info
atimetosearch.com
ramseyinfinity.com
pettainer.com
superiorwindowsolution.com
nevadapoker.info
torneoapple.com
qt-germany.info
rediscoveringrealestate.com
markfrancesco.com
puuqempp.com
sarahbreitenbach.com
getcoolfind.com
realslr.com
bombshellbeautyservices.com
episerv.com
458fxr.info
inspiral-architect.com
travel315.com
thisismysol.com
garekgodrik.com
artsook.com
workboatmanager.com
silessio.com
abyueche.com
trafficrehab.com
utimake.com
Targets
-
-
Target
28adf2e4dcd354d59a63e52a362750a3_JaffaCakes118
-
Size
480KB
-
MD5
28adf2e4dcd354d59a63e52a362750a3
-
SHA1
79c5d1240daa8250b38433c5c6c06360ed2d1d02
-
SHA256
532b875f09991cdf7b57db59f0f7aa579d49b229d65ad1ace9f67bf6ffc7bca5
-
SHA512
d48f37f38642fc3998aa0cc8100144ead93d81ff2fddee7816e0248c54976141871ac1e7cf415912d0f2ce1f40a5e9008dbf0576cd1c1b207706fe760a857f6d
-
SSDEEP
12288:CD1QXaV8sNRth4NevW9DrKhhiV59W5DBJLx9NU3uV:AlLXdPhQVe
-
Formbook payload
-
Suspicious use of SetThreadContext
-