General
-
Target
a53ca5c60cc21e40dd31a7a7a68ba74b_JaffaCakes118
-
Size
781KB
-
Sample
240818-d6qhxswdmr
-
MD5
a53ca5c60cc21e40dd31a7a7a68ba74b
-
SHA1
55f98b7940c216decffbee9ea0927334f8d56785
-
SHA256
8c5a90a4c4470d05fff7757920aa0a8bf56edab04f4eb926ba789652f1bfc74c
-
SHA512
01c393ea54de3a5b20ca08820be67a2dcbd9bd99bb993f8293a3c6ab283aab096b362e569dd33600fece8acec9ec77a4a62dfe25290d96851d99b198a4c38fdd
-
SSDEEP
12288:jsANYT/rTbYnFBznBjFcxN7j2/x4Z+7zTu2vRiZi6quXNLqB9pLoOn/fIHwkEN+n:D8/rTsfeiiZFqRjn/fgwkEN+vnVr1X
Static task
static1
Behavioral task
behavioral1
Sample
a53ca5c60cc21e40dd31a7a7a68ba74b_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
formbook
4.1
wle
peterwangofficial.com
bhjchouse.com
belladermalotion.com
rickmccomas.com
bigtime80s.com
wilmington-pestcontrol.com
take2ya.com
bibakkitap.com
livelifemagazine.com
acp118.com
myneuro-gym.com
kolornaire.com
edgeband-china.com
aogiworld.com
svcor.net
112wp.com
malaysiawhitecoffee.com
packers-vsvikings.com
chintels.net
stefan.tools
teachermaryam.com
freeinfom.xyz
podcaserz.com
725403.com
glencoreinternal.net
statirasin.com
sesliefsanem.com
truloqal.com
active-connector.xyz
mohamedmashhor.com
zennode059s.ovh
rapmu.com
sazshop.com
promoteyourpassionnow.com
pratosaudavel.com
dilauto-a.online
floridaevictionlaw.com
agreementdoc.com
iishon06.com
oregonover65.com
xn--fiqs8so3j246b.online
happenutem.com
dxnewradio.com
uyhams.com
deliverymail-promocija.com
everydaycollars.com
a273.xyz
basharalkhatib.com
ibepeter.com
mobilevidpro.com
generaciondonramon.com
getmermelada.pro
richchristians.com
856379631.xyz
paypalrevision.com
reaperskull.com
ryanssportsbarpattaya.com
shopwanderandwilderness.com
walkiriastore.com
jlvirtualassistant.com
michaeljfamoso.com
imertek.com
unbrokenpromises.pro
pejalanlaki.com
jimwheelerrealtor.com
Targets
-
-
Target
a53ca5c60cc21e40dd31a7a7a68ba74b_JaffaCakes118
-
Size
781KB
-
MD5
a53ca5c60cc21e40dd31a7a7a68ba74b
-
SHA1
55f98b7940c216decffbee9ea0927334f8d56785
-
SHA256
8c5a90a4c4470d05fff7757920aa0a8bf56edab04f4eb926ba789652f1bfc74c
-
SHA512
01c393ea54de3a5b20ca08820be67a2dcbd9bd99bb993f8293a3c6ab283aab096b362e569dd33600fece8acec9ec77a4a62dfe25290d96851d99b198a4c38fdd
-
SSDEEP
12288:jsANYT/rTbYnFBznBjFcxN7j2/x4Z+7zTu2vRiZi6quXNLqB9pLoOn/fIHwkEN+n:D8/rTsfeiiZFqRjn/fgwkEN+vnVr1X
-
Formbook payload
-
Suspicious use of SetThreadContext
-