General
-
Target
38694cf4cf60fc8408f11b40e2e62338_JaffaCakes118
-
Size
737KB
-
Sample
240729-e6f5xstcjk
-
MD5
38694cf4cf60fc8408f11b40e2e62338
-
SHA1
e42b57f70784715d37794ec05cc0da6ff356345c
-
SHA256
2c5f5dbeb72dc0832f94f4ad3bfe984ac1e8a9dd6b64a4335394cfc16ee00a6a
-
SHA512
fdb9cc5ff5a872bc9f383d06582a726652b4a2ce491bc1482bcf6e1808950835d57144061ee68b73a917db660f8aaaa381d4e6dc1657e69e5dca4d32d7648657
-
SSDEEP
12288:uwPp+fGL0Yjn2fdWVdzFXTjjmOuWktOtZf92UbWfTfy3IuO6oVizLIbZKY3Jjcxt:uwguHj2fdWnzFXT3mOdt3paglIK
Static task
static1
Behavioral task
behavioral1
Sample
38694cf4cf60fc8408f11b40e2e62338_JaffaCakes118.exe
Resource
win7-20240704-en
Malware Config
Extracted
formbook
4.1
bnc
iseoguide.com
rogerellisonline.com
thephonelenses.com
reddystone.com
explorehokianga.com
miaflcio.vote
baonihaochi.com
thewiseengineer.com
exciplexinc.com
luewaeeqaredre.com
atharvatechnologysolutions.com
vnsr1234.com
nationswines.com
toaglobalcc.com
texasbusrental.com
sailfishingcostarica.com
superbuy.today
mode-paradox.com
soperlz.xyz
filterdance.com
bllck.com
cocitas.com
hiflips.com
in-unicorn.com
panduitusa.com
pradamany.com
takingcheck.com
thinlinecreations.com
trendycollectionz.com
chantalrenaud.com
bundangsvc.com
stlouisoutdooradventures.com
patcapfinances.com
online-record.com
bangbangfactory.com
zzzttt10.com
jennishewardart.com
number1texasmedium.com
organichighqualityrush.com
ja6g.com
futureballet.com
siliconchips-synctoday.com
mesotherlioma.com
wzditai.com
chemcleandw.com
changhong433sj.com
k2night.com
londonvisas.com
luxuryfloatingflat.com
dgsazeh.com
graeciantiqui.net
finehairedgirls.com
comsweetrbx.com
pcnyyxo.icu
sevilce.com
omhwywwcxorl.com
top10mindset.com
cristinaiovu.com
fcpinnovacion.com
marcelopissardini.com
scorebuddycx.com
xn--lsuoa.net
mrchensauthenticchinese.com
jesse-mansfield.com
ccminghao.com
Targets
-
-
Target
38694cf4cf60fc8408f11b40e2e62338_JaffaCakes118
-
Size
737KB
-
MD5
38694cf4cf60fc8408f11b40e2e62338
-
SHA1
e42b57f70784715d37794ec05cc0da6ff356345c
-
SHA256
2c5f5dbeb72dc0832f94f4ad3bfe984ac1e8a9dd6b64a4335394cfc16ee00a6a
-
SHA512
fdb9cc5ff5a872bc9f383d06582a726652b4a2ce491bc1482bcf6e1808950835d57144061ee68b73a917db660f8aaaa381d4e6dc1657e69e5dca4d32d7648657
-
SSDEEP
12288:uwPp+fGL0Yjn2fdWVdzFXTjjmOuWktOtZf92UbWfTfy3IuO6oVizLIbZKY3Jjcxt:uwguHj2fdWnzFXT3mOdt3paglIK
-
Formbook payload
-
Suspicious use of SetThreadContext
-