General
-
Target
51507a0c76ccc002ad56782192d5257a_JaffaCakes118
-
Size
1.2MB
-
Sample
240517-y37y1shc56
-
MD5
51507a0c76ccc002ad56782192d5257a
-
SHA1
bd38cc47586688595625f85f6a09e48a2c06287c
-
SHA256
8c7a53c895aa1223a5dfde8ead365d9cbb4e8b868e81fbe9c52c3d203c5e1dba
-
SHA512
60d01558d5cb56cdd39a27d6f1dde3860fd51932cad1ca453194863cb25626d90f6ee0602efc900d55ead28a16d9130716a6605cb55d579ad1ae0f847960a354
-
SSDEEP
24576:6tb20pkaCqT5TBWgNQ7aGnTSxiQyCNOnck6A:nVg5tQ7aGSiQyC65
Static task
static1
Behavioral task
behavioral1
Sample
51507a0c76ccc002ad56782192d5257a_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
51507a0c76ccc002ad56782192d5257a_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
formbook
3.8
di
baoxiaofan.com
bestwaycartage.com
sag-architecture.com
salamcanteen.com
clinicalpsychologistkerala.com
mttv222.com
theweproject.com
fybbracelets.net
vv666h.com
bangfupin.com
arkprojetos.com
realgoaldigger.com
pilotedphotography.com
6zonxm55.biz
gaoduanmi.com
aminahmad.com
bountymarketing.net
christopher-rennebach.com
02xjys.faith
estilomiau.com
emoneysinhalen.com
av3rytin.com
chinabigtree.com
bless-corporation.com
archispectus.com
thedesignerslab.com
happylax.com
haxballeu.com
tryincubator.com
xmchenhe.com
icantwaittovoteagain.com
xahhr.net
allsaddledup.com
sanjuanislandsoap.net
alkhalid-group.com
fuji-qlick.com
knattertones.info
crackionic.com
zublin-perriere.net
shopesg.com
breastcarehk.com
ttnyfw.com
communistv.com
thfcfirstvariablelimited.com
rickeracheatingplumbing.com
susanamartineznotario.com
fuje.ltd
278manbet.com
elshabory.com
gaxxe.loan
florespreservadas.net
millionethomepage.com
cqkxcg.com
blockchhain.info
atiwhere.com
iot-king.com
pbbzh.win
colachain.com
verifuurbank.com
theplastercompany.com
ad-3.biz
tacootje.com
rushmad.win
galleryjoelle.com
spotekw.com
Targets
-
-
Target
51507a0c76ccc002ad56782192d5257a_JaffaCakes118
-
Size
1.2MB
-
MD5
51507a0c76ccc002ad56782192d5257a
-
SHA1
bd38cc47586688595625f85f6a09e48a2c06287c
-
SHA256
8c7a53c895aa1223a5dfde8ead365d9cbb4e8b868e81fbe9c52c3d203c5e1dba
-
SHA512
60d01558d5cb56cdd39a27d6f1dde3860fd51932cad1ca453194863cb25626d90f6ee0602efc900d55ead28a16d9130716a6605cb55d579ad1ae0f847960a354
-
SSDEEP
24576:6tb20pkaCqT5TBWgNQ7aGnTSxiQyCNOnck6A:nVg5tQ7aGSiQyC65
-
Formbook payload
-
Suspicious use of SetThreadContext
-