General
- Target 72a08d74790b5cc675899057127071cb_JaffaCakes118
- Size 246KB
- Sample240525-vdv2dabe57
- SHA256 e797f39f4c6816a5fb7261a80ec56f3aa6f80ab8c2a29e75b024b555552b373c
- MD5 72a08d74790b5cc675899057127071cb
- SHA1 64b3087bc076a7e1d07ede624ec16767dfb95fb2
- SHA512 db77172b220f22f060efcb9e1d7d96b5ab55125344ec608da1508f9bdc33eb83ae10651e4ab841ca57ea252adc358bed2fe6c56b793cd648048a4563bf2d7660
- SSDEEP 6144:WGMbSvcEJptXbT8t6FzVTfR9SbfoabduXRia+g35d8g/G:ibUtpte6HTJMr5uUsd
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
72a08d74790b5cc675899057127071cb_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
-
formbook
-
4.1
-
aofk
-
theplanetviral.com
-
51gayporn.com
-
mesathean.com
-
vaguidelines-updated.com
-
newuniverse.net
-
daveslehighvalleyvac.com
-
balikesirmasajsalonuu.com
-
chepinclub.com
-
shkafko.com
-
xn--eh3b11fp3f4me.com
-
qgochyljokbjjx.com
-
ashleetaylor.net
-
neckbeardnation.com
-
jordanthedev.com
-
pnwminiacs.com
-
tastyafrecipes.com
-
postmortemrecycled.com
-
bodypiercingblog.com
-
northwestclassicfirearms.com
-
manilagogo.com
-
beautifulbridesandbeyond.com
-
ceptenmuzikindirelim.com
-
kiacraft.com
-
brc-beei.com
-
maiscash.online
-
holdingeggs.com
-
carrymykeys.com
-
prosolutionsgroups.com
-
valueaddedindustries.com
-
00307r.com
-
rvp-archphoto.net
-
emarijuanarx.com
-
alejandrajazo.com
-
minlisc.com
-
c-opt.net
-
chairre.online
-
mycoin.exchange
-
academiefutsal.com
-
braggsservices.com
-
bolsafamilia2019.com
-
nesmx.com
-
nicholashohoho.com
-
corki.site
-
wellsnextthesealife.com
-
marydziek.com
-
venicecast.com
-
everfileit.info
-
lushe12121.com
-
rev-gaming.com
-
appliancerepairnwa.com
-
libertarian.site
-
idefoto.com
-
aircon.store
-
antojoboricuapr.coffee
-
brainpowersound.com
-
thetangleiota.info
-
g3391.com
-
story-learning.info
-
amenglishcenter.com
-
29chain.com
-
pranaavgroup.com
-
usainshape.com
-
553349.top
-
ipsoconference.com
-
mansiobok2.info
Targets
-
- Target 72a08d74790b5cc675899057127071cb_JaffaCakes118
- Size 246KB
- SHA256 e797f39f4c6816a5fb7261a80ec56f3aa6f80ab8c2a29e75b024b555552b373c
- MD5 72a08d74790b5cc675899057127071cb
- SHA1 64b3087bc076a7e1d07ede624ec16767dfb95fb2
- SHA512 db77172b220f22f060efcb9e1d7d96b5ab55125344ec608da1508f9bdc33eb83ae10651e4ab841ca57ea252adc358bed2fe6c56b793cd648048a4563bf2d7660
- SSDEEP 6144:WGMbSvcEJptXbT8t6FzVTfR9SbfoabduXRia+g35d8g/G:ibUtpte6HTJMr5uUsd
- MD5 SHA1 SHA512 SSDEEP
-
Formbook payload
-
Suspicious use of SetThreadContext