General
-
Target
b2d6c87e102168862ce088a9a3d080da_JaffaCakes118
-
Size
744KB
-
Sample
240821-kt4ncatckj
-
MD5
b2d6c87e102168862ce088a9a3d080da
-
SHA1
ffc51cda99bc409c8357eafd3e808984d498751b
-
SHA256
87ecddb8a02dae9f7c5b58e881eca264a6182407c40fd74b644365cad41d40b3
-
SHA512
15ff1083e4fe6374bdb8824f03ad82f2104829859790a613c761d3198c457cf2650ca0cd6710371e938af481cb33348b904c098abb68659819bc8c3a8489f4f4
-
SSDEEP
12288:61eRRAfxCIUnyNOI/SN/HWQZUpNRnpU5xNIyLoZIBEF0Czpf:8iRO8nyNOI0u7dngNBoZoXyp
Static task
static1
Behavioral task
behavioral1
Sample
b2d6c87e102168862ce088a9a3d080da_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
formbook
4.1
mro
lafemmebride.com
juqms.info
pagoverment.com
wronger.store
stir-studio.com
hodsonsfolly.com
hydrogenic.net
curasept.store
gas-turbine-training.com
drone-surveying.online
stablecoinusd.net
nahayatnegar.net
bullseyehealthy.com
cantinhodosabor.net
scovax.com
alexandrialistings.com
honeyflames.com
thesuccessjourneycoach.net
maputienda.com
skyandi.online
sjpinternship.com
exa-okr.net
pmc-digital.com
standifordplaceseniorliving.com
supremegeneticsnursery.com
savemorecbd.com
cevicheinkorea.com
breakfast-at-epiphanies.com
santamonicalandscapedesign.com
cloudthinking.net
pierangelodorini.com
giladgershon.com
rssem.com
bitjava.com
essentialjanitorialservices.com
iwearablognow.com
qqband.com
services2errands.com
dongshengjunyao.com
vendoquesos.com
pdxsciencetutor.com
sacredsexretreat.com
samaveshan.com
theberrydesign.com
nasaenergia.com
zimimuconsultants.com
swensonco.com
cubiconcorp.com
theboringpanda.com
drankushagrawal.com
101gx.com
samdendy.com
dailylawnsolutions.com
saferspine.com
amalia-house.com
onedevplus.com
securitypaymentalerts.com
thefemaleprogrammer.com
curvywhere.com
yo1marketing.com
tigerskart.com
agakibeya.com
ilovearistocrat.com
djhpainting.com
digitalserver.company
Targets
-
-
Target
b2d6c87e102168862ce088a9a3d080da_JaffaCakes118
-
Size
744KB
-
MD5
b2d6c87e102168862ce088a9a3d080da
-
SHA1
ffc51cda99bc409c8357eafd3e808984d498751b
-
SHA256
87ecddb8a02dae9f7c5b58e881eca264a6182407c40fd74b644365cad41d40b3
-
SHA512
15ff1083e4fe6374bdb8824f03ad82f2104829859790a613c761d3198c457cf2650ca0cd6710371e938af481cb33348b904c098abb68659819bc8c3a8489f4f4
-
SSDEEP
12288:61eRRAfxCIUnyNOI/SN/HWQZUpNRnpU5xNIyLoZIBEF0Czpf:8iRO8nyNOI0u7dngNBoZoXyp
-
Formbook payload
-
Suspicious use of SetThreadContext
-