General
-
Target
961d58926f56dda9c20f87e4ae2d106e_JaffaCakes118
-
Size
320KB
-
Sample
240604-yy9baaag43
-
MD5
961d58926f56dda9c20f87e4ae2d106e
-
SHA1
be7a9a7cf80f1d510ae05294168fbe7461a68366
-
SHA256
d544ec91e8b5894d6ba4fd625dd5fcc0ccf8e1fe452bcf136aee6bf82450b29a
-
SHA512
fb2d74880be3a4d1762f7dbd27931e34afa4d27568ef364c4b4f8827bc209e2da73141bb4f56bbdccddfa85cfe87ecef266d740daa9e9064ffea5245ed8b6591
-
SSDEEP
6144:WjjJzPiV3Pqh2RgyCKox05AUFbTZCHo6zm1:WPR6RAa/75Am4oam1
Static task
static1
Behavioral task
behavioral1
Sample
961d58926f56dda9c20f87e4ae2d106e_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Extracted
formbook
3.8
ch71
mediosonlinepanama.net
jovpyt.com
shthlw.com
bridgebiosciences.com
showmychild.com
arnaif.com
eps-inc.info
tv16698.info
epromingenieria.com
toptimiza.com
pyjhf.info
websitemerchantaccounts.com
topereaders.com
ushempalliance.com
riley-eng.com
certificatdeverre.com
jmekmall.com
theinceptionprojects.news
chris392.com
www8406w.com
cycleinstyleshop.com
in-creativespaces.com
studyingtheworld.net
themanandlife.com
annamaeskitchen.info
saramambiche.net
kaleidoscopecfa.com
subhayur.com
all-logic.net
070377.com
confirmation-account-locked.com
royalradio.online
shoptimez.com
thesplitsarchive.com
boludaescortbayanlar.site
stonedbythesea.com
198labo.com
ulzxs.com
5dollaressay.com
colorfly.ink
kriocorp.com
gc3srz.info
mafamillenombreuseaunaturel.com
mandarkebir.com
devonraesanford.com
indonesiadigitalnews.com
saintcyrilacademy.com
sidicom-mail.net
dolcehoney.com
meat.ltd
gotncome.com
lovedevotions.com
retiariusconsulting.com
bighappymarketing.com
moneymonsterormoneymaster.com
cyberasasvc.com
let340b.info
modularityinc.com
quiz-questions-api.com
kingyeemfg.com
youxiluyouqi.com
arcariadirect.com
43ey.com
outdoor-furniture.site
newraxz.com
Targets
-
-
Target
961d58926f56dda9c20f87e4ae2d106e_JaffaCakes118
-
Size
320KB
-
MD5
961d58926f56dda9c20f87e4ae2d106e
-
SHA1
be7a9a7cf80f1d510ae05294168fbe7461a68366
-
SHA256
d544ec91e8b5894d6ba4fd625dd5fcc0ccf8e1fe452bcf136aee6bf82450b29a
-
SHA512
fb2d74880be3a4d1762f7dbd27931e34afa4d27568ef364c4b4f8827bc209e2da73141bb4f56bbdccddfa85cfe87ecef266d740daa9e9064ffea5245ed8b6591
-
SSDEEP
6144:WjjJzPiV3Pqh2RgyCKox05AUFbTZCHo6zm1:WPR6RAa/75Am4oam1
-
Formbook payload
-
Suspicious use of SetThreadContext
-