General
-
Target
c68506d23178bedf545bb2b028d8572e_JaffaCakes118
-
Size
847KB
-
Sample
240828-klfasa1hra
-
MD5
c68506d23178bedf545bb2b028d8572e
-
SHA1
3b4d7f2827f3c11ad73596943a19707d61e92bf5
-
SHA256
17de42648d49e21ed411c460fa0c805443e1898e21114beb8ea7301da3ee6b31
-
SHA512
bf24fcfc36f96eeedeab6cfc222fcc34d8925e29fbdef5fc57ae002237d4202897e2b062ea0fe9552a5514802bb4289ed8a4c6522234d1504cc953acca7f39f2
-
SSDEEP
12288:8ayc8dtxZjKBVbBstxucrzyUYG2gmmz/PXtgobWmpfb4dstkoHQH8mlLeOIP:qPtxFKXboucS5vcz/2Cpvko2pxRc
Static task
static1
Behavioral task
behavioral1
Sample
c68506d23178bedf545bb2b028d8572e_JaffaCakes118.exe
Resource
win7-20240704-en
Malware Config
Extracted
formbook
4.1
3nk4
teresaanaya.com
byronhobbs.com
altiizgara.com
reignsponsibly.com
kanistones.com
clickpk.site
aizzainvestments.com
bpqbq.com
openfitxbstretch.com
blackvoicesstore.com
yousefzaid.com
verdeaccounting.com
independentthoughtshow.com
fainlywatchdog.com
elreventondelsabor.com
spiceyourfood.com
1277hb.com
cesttoni.com
portalngs.com
turismoplayas.com
futurevisiondubai.com
grandpaeddiesbbq.com
tenkillersolutions.com
laagerlitigation.club
kyleandabbey.com
badassbae-bae.com
qraieahckby.com
moskvaoptom.net
autoserviceprovider.com
foodrhyme.com
andrew-vencetore.com
clasimovie.com
universitylook.com
123ufabet.club
bucearte.com
mytreasurecare.com
tenstarcleaning.com
iluvpictures.com
emvision.online
thepurplestrip.com
msrawyh.com
viiokey.com
davidgrayceramic.art
letsdiscover.coach
codingintamil.com
luxtourbus.com
appsofbuffalo.com
lunacardenas.com
aurifexinsurance.com
turkishhouse.restaurant
pureanddutch.com
thechurchboyapparel.com
eyebeamblue.com
upperbunk.com
jsruiyang.com
hillarykelly.com
stanleys.website
2r738euwdfhijn.com
luma-luxury-matchmaker.com
familycarehd.com
securitybyicon.com
myveeta-talents.com
nubianartstudio.com
liancaiwangv2.com
trulex.xyz
Targets
-
-
Target
c68506d23178bedf545bb2b028d8572e_JaffaCakes118
-
Size
847KB
-
MD5
c68506d23178bedf545bb2b028d8572e
-
SHA1
3b4d7f2827f3c11ad73596943a19707d61e92bf5
-
SHA256
17de42648d49e21ed411c460fa0c805443e1898e21114beb8ea7301da3ee6b31
-
SHA512
bf24fcfc36f96eeedeab6cfc222fcc34d8925e29fbdef5fc57ae002237d4202897e2b062ea0fe9552a5514802bb4289ed8a4c6522234d1504cc953acca7f39f2
-
SSDEEP
12288:8ayc8dtxZjKBVbBstxucrzyUYG2gmmz/PXtgobWmpfb4dstkoHQH8mlLeOIP:qPtxFKXboucS5vcz/2Cpvko2pxRc
-
Formbook payload
-
Suspicious use of SetThreadContext
-