General
-
Target
64b87e9916964542d37ee247c8ebb07d_JaffaCakes118
-
Size
666KB
-
Sample
240729-2h8llatgkn
-
MD5
64b87e9916964542d37ee247c8ebb07d
-
SHA1
9a1fbf2e70483196c1a8f3da38fac0307aa1d949
-
SHA256
bcaf7b4adc919fd5aaae24902b8135e2ad6d13249e9cb784b1532b52e40449b5
-
SHA512
1023e2e00144f56439148d0d2e58b34ea70f6d611d8edbe5a8151f20e376be00bb58f6bf912e34f86f5505d02a4816e8831b3af2e75f3d1fe2f41295b4a6b698
-
SSDEEP
12288:yGH7v8M0Y2twNRqVI8F5YX0TTrBD9WT5HW9PG7LWmKcPU4gjz1pD5rZ8g0UlVwu6:kPfwN0W8F799swyWhL
Static task
static1
Behavioral task
behavioral1
Sample
64b87e9916964542d37ee247c8ebb07d_JaffaCakes118.exe
Resource
win7-20240705-en
Malware Config
Extracted
formbook
4.1
cmg
bestessentialcare.com
lemonguild.com
veronabling.com
omvzshop.com
austingutterrepair.com
noracbn.com
shizukis.com
keatingfreelanceservice.com
teamtobook.com
mqcsegurosyfinanzas.com
t-chou-pino-v.com
yuyunst.com
ctlaltignite.com
zinaidaphoto.com
ag-gis.com
hdollars.net
usa-zuche.com
opexsoftwaresupport.com
kaizenseed.com
thejoyshare.com
educatormannq.com
virtualproductionthailand.com
penwitz.com
statestreetphillips.com
qjzcn.com
dltlogisticsllc.com
ski-onderhoud.com
blinklabs.net
swissinterest.com
cnweinixi.com
x2emails.xyz
champagneparcel.com
magikgrocery.com
pbqjm.com
happypetsy.com
visiongovtexam.com
4980012550430251.com
isfully.com
1252nancarrowway.com
distillexplorer.com
call4cement.com
novelcrm.com
beddaganawetlandpark.com
asset-sunrise.com
pluslovefashions.com
job-scribe.com
xtremhunt.com
lockandkeyesthetics.com
numou.international
5616pacific.com
mypronline.com
weightlossteletherapy.com
lausois.com
shipu278.com
crabbytoes.com
reiki-organit-stube.com
secundariatecnica86.com
netsupportcloud.com
directmask.supplies
ntervenehealth.com
awkfree.net
acreslands.com
rsyueda.com
somebunny-new.com
gardunomx.com
Targets
-
-
Target
64b87e9916964542d37ee247c8ebb07d_JaffaCakes118
-
Size
666KB
-
MD5
64b87e9916964542d37ee247c8ebb07d
-
SHA1
9a1fbf2e70483196c1a8f3da38fac0307aa1d949
-
SHA256
bcaf7b4adc919fd5aaae24902b8135e2ad6d13249e9cb784b1532b52e40449b5
-
SHA512
1023e2e00144f56439148d0d2e58b34ea70f6d611d8edbe5a8151f20e376be00bb58f6bf912e34f86f5505d02a4816e8831b3af2e75f3d1fe2f41295b4a6b698
-
SSDEEP
12288:yGH7v8M0Y2twNRqVI8F5YX0TTrBD9WT5HW9PG7LWmKcPU4gjz1pD5rZ8g0UlVwu6:kPfwN0W8F799swyWhL
-
Formbook payload
-
Suspicious use of SetThreadContext
-