General
-
Target
ae99103e5ce4607dceddd757d78538df_JaffaCakes118
-
Size
268KB
-
Sample
240820-kwl63sxbrj
-
MD5
ae99103e5ce4607dceddd757d78538df
-
SHA1
1bba604a228afa3acff5d06f3e2b4b1f9b833d85
-
SHA256
93e98542a60cdc289195a75af47998995b83a01c880a9647d1171be104ab970b
-
SHA512
df6c0078fccd05b60ab46a9b26d2761ea3290500bd1f611678ea9a3e2cfdd7064a44b1f4ec3f95e2ec2e82d6253c733bc8ff9904b21558770335f45e16868a1a
-
SSDEEP
6144:blRikI9uFJXo1hCoKJ3c9eWhWzlFF2Yl:JHI9ujXohCoWM9eoWz/FD
Static task
static1
Behavioral task
behavioral1
Sample
ae99103e5ce4607dceddd757d78538df_JaffaCakes118.exe
Resource
win7-20240704-en
Malware Config
Extracted
formbook
3.6
ch24
rrd-wbd.com
astonherencia.com
socialsurveymaker.com
ofthefamily.net
hiza.ltd
xygczs.com
bjxeb.net
equifaxsecurikty2017.com
rongxiangmifeng.com
atelierbunnybunny.com
xn--fiq316n.com
creativsec.com
miaspiro.com
fantasi.info
donworrycredit.com
mistyroads.com
sxjhyy.com
lullv.info
squarewaycall.net
vshark.net
lutzfriedrich.com
stealthadvocates.com
justbasins.com
bingadsguide.site
pictonrm.com
llo88oll-kitty.com
ransont.world
283manbet.com
businesslinks.biz
viaengine.com
drinkandbeyondoutlet.com
rubbishcollectionlewisham.ltd
xn--ok0bl1wj9dn4hbuq.com
comercialvector.com
yourtv.online
cryptecs.biz
homeinthehemlocks.com
portici.store
onyxtoken.com
freejazzpizza.com
findurfreedomonline.com
gidopark.com
skissur-production.com
jorgmar.com
elitebasketballleague.com
trendingcult.com
organicbiodefensoresdegaia.com
codeblack.online
datnhadongnai.com
225766666.com
pargankala.com
magicaffiliatehub.com
rubyhydephotography.com
freepaymentservices.com
harriettawalterson.net
eliteipage.com
nabilhourani.com
tsolbook.net
bigapps.tech
danrelates.com
confusedmale.com
melyphoto.site
xn--jpra5268b.com
rersm.loan
exisceztim.info
Targets
-
-
Target
ae99103e5ce4607dceddd757d78538df_JaffaCakes118
-
Size
268KB
-
MD5
ae99103e5ce4607dceddd757d78538df
-
SHA1
1bba604a228afa3acff5d06f3e2b4b1f9b833d85
-
SHA256
93e98542a60cdc289195a75af47998995b83a01c880a9647d1171be104ab970b
-
SHA512
df6c0078fccd05b60ab46a9b26d2761ea3290500bd1f611678ea9a3e2cfdd7064a44b1f4ec3f95e2ec2e82d6253c733bc8ff9904b21558770335f45e16868a1a
-
SSDEEP
6144:blRikI9uFJXo1hCoKJ3c9eWhWzlFF2Yl:JHI9ujXohCoWM9eoWz/FD
-
Formbook payload
-
Suspicious use of SetThreadContext
-