General
- Target e5fb31f7be04068fc088418d642e292b_JaffaCakes118
- Size 268KB
- Sample240917-d67r7sshkm
- SHA256 42154d0805933548da9b7a9fbbce40be9e155091e6f96ed4ce324c21b3430b20
- MD5 e5fb31f7be04068fc088418d642e292b
- SHA1 9c043826be0f12c96dce9a58b6793dfe33926589
- SHA512 717dd2e37ca44041293dfda5bd6a455c83d33d62e55a0d34bfdbe90deddf12e65dafff3819de3a38e59d241cd2aca2f7ecbfe366935b6fff0a21846176ae9299
- SSDEEP 6144:AyaOH6GdiNywts0oFiv4HmdChI7Cm6Vad:+f3i44GdyIH
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
e5fb31f7be04068fc088418d642e292b_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
-
formbook
-
3.7
-
ch27
-
lijianfans.net
-
keziamandelin.com
-
goldenoceanoutdoor.com
-
isilvaphotography.com
-
cindypantoja.com
-
animalfriendsllc.com
-
diikey.com
-
trainerpoqe.men
-
berastours.com
-
pagelink.info
-
lemsinternetbiz.site
-
cervezascolder.com
-
bombom.site
-
heromorfin.com
-
eltirachinasasturiano.com
-
spacity.biz
-
microbladingshop.net
-
tfworkstation.com
-
mengxiaoxi.net
-
ggg585.com
-
thrivemediadesigns.com
-
yzlaw120.com
-
grademg.com
-
chundanfood.com
-
taibeiai.com
-
quistock.com
-
wxm119.com
-
manbet507.com
-
553413.top
-
crete-exhibitions.com
-
meinvmote.com
-
ddluav95.com
-
86photos.com
-
reslimited.net
-
intrumpwetrust.loan
-
kbmuonline.com
-
lampung.email
-
samdismore.co.uk
-
ngc.gold
-
onlydebauchery.com
-
getonlinefree.com
-
wilsonsprom.cruises
-
beoyafushi.com
-
exxonmobileofp.com
-
meiluhome.com
-
pprproducts.com
-
xn--q3cjk0g0c2ad.net
-
megalegenda.com
-
umnyash.com
-
oobin.info
-
idaho25.com
-
vmetric.com
-
arbetekraft.com
-
annaossanna.com
-
xn--74q37fh5e728f.com
-
fihdal.men
-
madzanimations.com
-
strongbelly.com
-
ylpzt.loan
-
ap17-09-07.com
-
nogikeya.net
-
spaceoperakaraoke.com
-
ymaiul.com
-
271simsroad.com
-
wayyout.info
Targets
-
- Target e5fb31f7be04068fc088418d642e292b_JaffaCakes118
- Size 268KB
- SHA256 42154d0805933548da9b7a9fbbce40be9e155091e6f96ed4ce324c21b3430b20
- MD5 e5fb31f7be04068fc088418d642e292b
- SHA1 9c043826be0f12c96dce9a58b6793dfe33926589
- SHA512 717dd2e37ca44041293dfda5bd6a455c83d33d62e55a0d34bfdbe90deddf12e65dafff3819de3a38e59d241cd2aca2f7ecbfe366935b6fff0a21846176ae9299
- SSDEEP 6144:AyaOH6GdiNywts0oFiv4HmdChI7Cm6Vad:+f3i44GdyIH
- MD5 SHA1 SHA512 SSDEEP
-
Formbook payload
-
Suspicious use of SetThreadContext