General
-
Target
7dea919335b7415145dcb694bac5f9eb_JaffaCakes118
-
Size
1020KB
-
Sample
240528-ww7csseg4x
-
MD5
7dea919335b7415145dcb694bac5f9eb
-
SHA1
91271d5025da4c67a45418d84237aa09bfef6c4a
-
SHA256
ce27c0a745f19a11fba15ad2dc58082f43f937887271561a59d832bf734babdc
-
SHA512
bef8688eb6ca0e1c2543e4897bb7cbafed6b08a2e92b0c19c358fe3b269fd4910c57d9654ce4ad8c4a9a773910af43c70b15da44aba9ea4eb2581bdd1529ceb5
-
SSDEEP
12288:2Q/FDJIvvde9nJYxDJIvvde9nJYq/qqg7jE3KScuJVGd8X4Tds:zIv0nJYDIv0nJYquQ3KmPGaX4Js
Malware Config
Extracted
formbook
4.1
ggb
meanwhileinselkirk.com
maxrho.com
175bb4.com
suzuki125.win
cyzj168.com
autosafeshield.com
ancamine.com
popdshop.com
weightday.com
liftoffresponder.com
mygreatzimbabwe.com
servizintegratisrls.com
xn--cckaav6fb9onfzf2c.tech
loanrates.online
trusthub.biz
meitaodaren.com
disney-vacation-hotels.com
6u58.com
naplesmeetsnewyork.com
dafa140.com
Targets
-
-
Target
7dea919335b7415145dcb694bac5f9eb_JaffaCakes118
-
Size
1020KB
-
MD5
7dea919335b7415145dcb694bac5f9eb
-
SHA1
91271d5025da4c67a45418d84237aa09bfef6c4a
-
SHA256
ce27c0a745f19a11fba15ad2dc58082f43f937887271561a59d832bf734babdc
-
SHA512
bef8688eb6ca0e1c2543e4897bb7cbafed6b08a2e92b0c19c358fe3b269fd4910c57d9654ce4ad8c4a9a773910af43c70b15da44aba9ea4eb2581bdd1529ceb5
-
SSDEEP
12288:2Q/FDJIvvde9nJYxDJIvvde9nJYq/qqg7jE3KScuJVGd8X4Tds:zIv0nJYDIv0nJYquQ3KmPGaX4Js
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-