General
-
Target
aca9506befd5d3cebd9744727c95f19f_JaffaCakes118
-
Size
260KB
-
Sample
240819-1dk43awhpf
-
MD5
aca9506befd5d3cebd9744727c95f19f
-
SHA1
b49ae32e4d165ce72965a1173717d23a8a68a16b
-
SHA256
fa808c78e722a6b3dc9702e455a296fd0b9ada3b049a8e2d5340ad76d3727f61
-
SHA512
5b387c4678d88590d49f46ecd60870d5739fb243dba7ebbd429b920d8e04e6bc84ff494bf868acbc02f50793e419ba64f0e9a401bb078707784e3307aab697fb
-
SSDEEP
6144:CaJsnTdMmLSJ/ChJjNwHXGny6nKNyB2jkRq8efYbxF5Lt1J0:/GdMnJ/KKXKpnky2iHewF5Ld
Static task
static1
Behavioral task
behavioral1
Sample
aca9506befd5d3cebd9744727c95f19f_JaffaCakes118.exe
Resource
win7-20240705-en
Malware Config
Extracted
formbook
3.2
ch8
52hiphop.com
goldenraintrading.com
ggdbshoes.store
mysucculentkitchen.com
p-d-d.com
wcsg2018.com
bbb544.com
mybaribox.com
primeroconsalud.com
tildeconilatina.com
pb20000.com
anittreppenlifthilfeok.live
ginebracero.com
dgdgdsgdsgdsgsdgdsg2.com
ymqtq.com
gz1024.info
brandonwalker.info
vast-solutionsmail.com
knightgrandmaster.online
happybwords.com
holmnetworks.com
6870pe.com
ivu6utygv.tech
4dconcaptsusa.com
videogoldproductions.net
repsolmotoroil.com
invest-htbc.com
empoweredbywago.com
pearlstartravel.com
giuromusic.com
1a5sevencolour.men
wonderun.ltd
freexxxsexpics.com
logo8027.com
twistofeverything.com
dietician-consultant.com
axcendhealthpl.com
tropicalcupcakes.com
dib-uae-online.com
sk8geek.net
kalaclub.net
immexpo-aix.com
castlesandcarriages.com
livemusiclover.store
royaleventspartyplanning.com
insuperableness.kim
poaevents.com
tokuyo.net
pasternacksministorage.net
200897.top
sacredritualfoods.com
xn--cck6a9e.com
goodsystemtoupgrades.review
bast33.com
minerrus.com
bolandoideias.net
bigshinesz.com
power-your-brain.net
lintiao.net
googlebusinessclubs.com
wwwhb2146.com
marijuanaattorney.win
innercircles.guide
oescs.com
aldranerz.info
Targets
-
-
Target
aca9506befd5d3cebd9744727c95f19f_JaffaCakes118
-
Size
260KB
-
MD5
aca9506befd5d3cebd9744727c95f19f
-
SHA1
b49ae32e4d165ce72965a1173717d23a8a68a16b
-
SHA256
fa808c78e722a6b3dc9702e455a296fd0b9ada3b049a8e2d5340ad76d3727f61
-
SHA512
5b387c4678d88590d49f46ecd60870d5739fb243dba7ebbd429b920d8e04e6bc84ff494bf868acbc02f50793e419ba64f0e9a401bb078707784e3307aab697fb
-
SSDEEP
6144:CaJsnTdMmLSJ/ChJjNwHXGny6nKNyB2jkRq8efYbxF5Lt1J0:/GdMnJ/KKXKpnky2iHewF5Ld
-
Formbook payload
-
Suspicious use of SetThreadContext
-