General
-
Target
b49ae4462f5ed9597f6f3646091c707a_JaffaCakes118
-
Size
485KB
-
Sample
240821-xepl4aybjj
-
MD5
b49ae4462f5ed9597f6f3646091c707a
-
SHA1
0346b7e8e054c151735647d469f265028019bd2e
-
SHA256
90e6f10a0caabd250a9d43d12982b5861ec160177d99ad07ce68bd18d103736c
-
SHA512
bbecb4e15aa7bf37b440ab87d5aaaa1e7576aecd901da5e108113dc9dbd893c02eff69c205b33fe0996ab104cfb7bb909c012cc3383f766ab3180cf0d924877b
-
SSDEEP
6144:nKmCLXDlnhuQ+3HwOcc0WYHMTZPPPO1/E9aPEUEN75kpr4j6lrG1yXUKqLe:S3occ0W1TZPPPOlcU675WlrGwXc
Static task
static1
Behavioral task
behavioral1
Sample
b49ae4462f5ed9597f6f3646091c707a_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
formbook
4.1
rv9n
olivia-grace.show
zhuwww.com
keiretsu.xyz
olidnh.space
searuleansec.com
2fastrepair.com
brooklynmetalroof.com
scodol.com
novaprint.pro
the-loaner.com
nextroundscap.com
zbwlggs.com
internetautodealer.com
xn--tornrealestate-ekb.com
yunjiuhuo.com
skandinaviskakryptobanken.com
coxivarag.rest
ophthalmologylab.com
zzzzgjcdbqnn98.net
doeful.com
beatthebank.fund
deposit-pulsa2021.xyz
uptownsecuritysystems.com
thegroveonglendale.com
destinationth.com
healthcareuninsured.com
longhang.xyz
ypxwwxjqcqhutyp.com
ip-15-235-90.net
rancholachiquita.com
macblog.xyz
skillsbazar.com
beatyup.com
academiapinto.com
myguagua.com
fto8y.com
ohioleads.net
paravocebrasil.com
thecanyonmanor.com
acu-bps.com
comunicaretresessanta.net
schwa-bingcorp.com
discountcouponcodes-jp.space
kufazo.online
metaverge.club
800car.online
brendanbaehr.com
garfieldtoken.net
secretfoldr.com
13itcasino.com
marketingatelier.net
computersslide.com
marcastudios.com
thestreetsoflondon.life
maintaintest.com
cronicasdebia.com
apm-app.com
sepulchral.xyz
lodha-project.com
theartofsoulwork.com
swimminglessonsshop.com
klarnabet.com
control-of-space.net
heliumathletic.com
cjspizza.net
Targets
-
-
Target
b49ae4462f5ed9597f6f3646091c707a_JaffaCakes118
-
Size
485KB
-
MD5
b49ae4462f5ed9597f6f3646091c707a
-
SHA1
0346b7e8e054c151735647d469f265028019bd2e
-
SHA256
90e6f10a0caabd250a9d43d12982b5861ec160177d99ad07ce68bd18d103736c
-
SHA512
bbecb4e15aa7bf37b440ab87d5aaaa1e7576aecd901da5e108113dc9dbd893c02eff69c205b33fe0996ab104cfb7bb909c012cc3383f766ab3180cf0d924877b
-
SSDEEP
6144:nKmCLXDlnhuQ+3HwOcc0WYHMTZPPPO1/E9aPEUEN75kpr4j6lrG1yXUKqLe:S3occ0W1TZPPPOlcU675WlrGwXc
-
Formbook payload
-
Suspicious use of SetThreadContext
-