General
-
Target
72a08d74790b5cc675899057127071cb_JaffaCakes118
-
Size
246KB
-
Sample
240525-vdv2dabe57
-
MD5
72a08d74790b5cc675899057127071cb
-
SHA1
64b3087bc076a7e1d07ede624ec16767dfb95fb2
-
SHA256
e797f39f4c6816a5fb7261a80ec56f3aa6f80ab8c2a29e75b024b555552b373c
-
SHA512
db77172b220f22f060efcb9e1d7d96b5ab55125344ec608da1508f9bdc33eb83ae10651e4ab841ca57ea252adc358bed2fe6c56b793cd648048a4563bf2d7660
-
SSDEEP
6144:WGMbSvcEJptXbT8t6FzVTfR9SbfoabduXRia+g35d8g/G:ibUtpte6HTJMr5uUsd
Malware Config
Extracted
formbook
4.1
aofk
theplanetviral.com
51gayporn.com
mesathean.com
vaguidelines-updated.com
newuniverse.net
daveslehighvalleyvac.com
balikesirmasajsalonuu.com
chepinclub.com
shkafko.com
xn--eh3b11fp3f4me.com
qgochyljokbjjx.com
ashleetaylor.net
neckbeardnation.com
jordanthedev.com
pnwminiacs.com
tastyafrecipes.com
postmortemrecycled.com
bodypiercingblog.com
northwestclassicfirearms.com
manilagogo.com
Targets
-
-
Target
72a08d74790b5cc675899057127071cb_JaffaCakes118
-
Size
246KB
-
MD5
72a08d74790b5cc675899057127071cb
-
SHA1
64b3087bc076a7e1d07ede624ec16767dfb95fb2
-
SHA256
e797f39f4c6816a5fb7261a80ec56f3aa6f80ab8c2a29e75b024b555552b373c
-
SHA512
db77172b220f22f060efcb9e1d7d96b5ab55125344ec608da1508f9bdc33eb83ae10651e4ab841ca57ea252adc358bed2fe6c56b793cd648048a4563bf2d7660
-
SSDEEP
6144:WGMbSvcEJptXbT8t6FzVTfR9SbfoabduXRia+g35d8g/G:ibUtpte6HTJMr5uUsd
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-