General
-
Target
2cc9f4a819185333bc946cbe1c550210_JaffaCakes118
-
Size
910KB
-
Sample
240510-cem32scd2w
-
MD5
2cc9f4a819185333bc946cbe1c550210
-
SHA1
6ce7d3ee1af2e3ec697dad4002d3b6e9110dba3d
-
SHA256
2ffe3df675a097fefad87b0c66d028ff6a732dbd67f4385777c4fb52a3e60994
-
SHA512
98d00d533510bad7fe70383733b90c82df1186871e03360480d5506111dee8b8bfe37844d880084af2d05624e0fcb22fd601a19bc53e6e30f340afdb09dd9856
-
SSDEEP
24576:oNHCmvI0fjnjOgYwC4U4o5EOYf4yI7OUcaY:wfRLNYwtUD7OKY
Static task
static1
Behavioral task
behavioral1
Sample
2cc9f4a819185333bc946cbe1c550210_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
formbook
4.1
te
sharjo-begir2.xyz
shroomsmy.com
citestpridom20200814092033.net
alemaruy.com
etong-tech.com
lomomofarm.com
elitenailsupplyva.com
thoughtfulbuddhist.online
therealtalkers.com
castleemerald.net
ysksafety.com
amazingrealtors.net
sourcesharp.com
commentorsint.com
alinement-solutions.info
expressivepins.com
americanbullylover.com
calerie.net
poamerican.com
epicoutreach.events
allnetamericas.com
bestbowrider.com
abelroofing.com
haraduda.com
planeta-ekb.com
aussieenjoyment.today
spreadalight.com
dgjinan.com
twincityradio.com
trimgarage.xyz
greeniemobiledetailing.com
paymentinformationcustsuprt.com
puredietaryketo.com
activateyoursuperpower.com
alrahmah.info
globalvitalsigns.com
hd627.com
smashcanceratlantis.com
shrtlnk.pro
advancemusclescience.com
jenhfuaksiea.com
mastekltd.com
qjcnnm.com
campusbuchs.com
giantsculpture.com
pbsadr.com
danielwk.net
womenofwatercolour.com
kaya-shop.com
nicholehwilliams.com
blushsocialmedia.com
sebastianobscura.com
soperlz.xyz
queenbeecarfinance.com
creatordemands.com
bolsolut.com
moderntravelgear.com
wchaycoffee.com
sacredartstv.com
trendycooljewels.com
panel.wiki
winlfcus.com
the941news.com
audiologiamallorca.com
tantitogeek.com
Targets
-
-
Target
2cc9f4a819185333bc946cbe1c550210_JaffaCakes118
-
Size
910KB
-
MD5
2cc9f4a819185333bc946cbe1c550210
-
SHA1
6ce7d3ee1af2e3ec697dad4002d3b6e9110dba3d
-
SHA256
2ffe3df675a097fefad87b0c66d028ff6a732dbd67f4385777c4fb52a3e60994
-
SHA512
98d00d533510bad7fe70383733b90c82df1186871e03360480d5506111dee8b8bfe37844d880084af2d05624e0fcb22fd601a19bc53e6e30f340afdb09dd9856
-
SSDEEP
24576:oNHCmvI0fjnjOgYwC4U4o5EOYf4yI7OUcaY:wfRLNYwtUD7OKY
-
Formbook payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext
-