General
-
Target
d1d5dad6e92334d394ebc7bc42c01169_JaffaCakes118
-
Size
308KB
-
Sample
240907-nnr9xasbnk
-
MD5
d1d5dad6e92334d394ebc7bc42c01169
-
SHA1
b96761570949d697a0f918d0878c0b5a890bd5c3
-
SHA256
c77ae9fb29c86b45d5b366e26f539fed7962f8b5da0834ceba78cc8a127e5401
-
SHA512
54156d92f65df595147124e61a78e534ce9fc913a4fe64e061897c2098b250f458b190784caa832b5873e97cc5a80cd901b10748f724e9e81a88e888735978ed
-
SSDEEP
6144:m6aiBK1jP4NzElRMNqYpMPhSHWc2i8loza+THF1QvB:m6at1MNQlRMMhoDh2mHQ5
Static task
static1
Behavioral task
behavioral1
Sample
d1d5dad6e92334d394ebc7bc42c01169_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
formbook
3.9
b1
ncdclub.com
giahoachatxulynuoc.com
cmz.ink
gollehkon.com
xn--xkr832a.com
thereseika.com
formule1time.com
hengsongmuye.com
primeengenharia.com
dd000009677.com
designbecome.com
infinitewisdom.store
veritableassets.com
equifasecurity2017.com
seemanage-inc.com
planetreporter.info
embodiedcommunity.com
beautysamui.com
support-emailnotification.com
siweimiao.com
8827oooo.com
jasonpaulfrancis.com
sanhetech.com
nareshpal.com
grubsbootsusa.com
novisma.online
testdomover1.com
leathermustachecostume.com
liagalaxy.com
mypawsomeshop.com
patidebocede.com
sandandseaandsky.date
gymnasticsporn.com
icar315.net
roulettespielenundgewinnen.net
ytuwut.info
taniad333.com
materion-jobs.com
alitukang.com
halcorelval.com
o-case.com
oneclickketo.com
physiopraktiker.com
tomeast.com
xo8ohjaec.com
tv16678.info
yhit.ltd
diaosifufu.com
dealworld24.com
philex-china.com
makrobet405.com
contagiousfaithmusic.com
kumanoda.com
embim.com
sistemasaplicados.net
ccsongwritersshop.com
hongyubj.com
389bi-msfm.biz
021manbetx.com
900cp18.com
klsland.com
chuliorg.com
webmailglenmarkpharma.com
maylammatna.com
pinacu.com
Targets
-
-
Target
d1d5dad6e92334d394ebc7bc42c01169_JaffaCakes118
-
Size
308KB
-
MD5
d1d5dad6e92334d394ebc7bc42c01169
-
SHA1
b96761570949d697a0f918d0878c0b5a890bd5c3
-
SHA256
c77ae9fb29c86b45d5b366e26f539fed7962f8b5da0834ceba78cc8a127e5401
-
SHA512
54156d92f65df595147124e61a78e534ce9fc913a4fe64e061897c2098b250f458b190784caa832b5873e97cc5a80cd901b10748f724e9e81a88e888735978ed
-
SSDEEP
6144:m6aiBK1jP4NzElRMNqYpMPhSHWc2i8loza+THF1QvB:m6at1MNQlRMMhoDh2mHQ5
-
Formbook payload
-
Suspicious use of SetThreadContext
-