General
-
Target
eaf957fed02fc143802d3eff11d4dddf_JaffaCakes118
-
Size
1.4MB
-
Sample
240919-kp6l5szdqe
-
MD5
eaf957fed02fc143802d3eff11d4dddf
-
SHA1
ce04e0cbca0fd7e1abe322a7f94a7eb01ddf72cb
-
SHA256
6a86727505f9aacbb6e9d67445b8e99d23e37d9db46a737e1b2c72274332cb41
-
SHA512
ae164f196583f7a2a6b12a902fa118e30a0f653700c30aa17ab97219b9c5f6eaaad3f765fab89b6ff5da48b521f283c45c73e20d38e76ff6c2c55f99b82df612
-
SSDEEP
12288:zJW/kYR3J9bXwjnA7fUL64zJuk8q0UmA1NzENYgnBKPqSY29oPtrPN4In5VreTCf:fs/vQL4uY
Static task
static1
Behavioral task
behavioral1
Sample
eaf957fed02fc143802d3eff11d4dddf_JaffaCakes118.ps1
Resource
win7-20240903-en
Malware Config
Extracted
formbook
4.1
j3gd
lpumanagement.com
seafreshindia.com
progetto-energia.com
anthonyconstantis.com
wuhanyinyue.com
rimflso.com
zayedcenter.net
toggturkish.com
grayshottspalife.com
migliorarelasalute.website
micj1426.com
salicosmetic.com
renospro.com
fantasiegeschichten.com
velvetgoo.art
chasernt.online
mojogrup.com
beer-app.com
workitsexyguru.com
rmhansonfreelancewriting.com
03c3tnpvnu16sxlpreu2281.com
thesolitairebliss.com
meshworksmanagement.com
womento.kitchen
trippytigerzteaparty.com
ellemediallc.com
organonacademy.com
aprabha.com
natifar7884.com
groupeosiris-afrique.com
tedswoodworking16000.com
cardgalaxyapp.com
bajutidur.xyz
gettheforkouttampa.com
luxivana.com
americanvrfarm.com
qypcurso.xyz
anguillalitfest.com
dirigirbem.com
evolvehemb.com
photographyofcharlotte.com
springhousemanagement.com
domainedemontessori.com
adoniobet.com
travelermeet.com
mtools-usa.com
lulushomecakery.com
aaronparecki.xyz
moderevolt.com
bookhousehotel.com
carcof.com
kolomalabs.com
4on6.com
boostblackgirllove.com
differentesports.com
motherearthhaulers.com
pacificpaymentprocessing.com
sinooceancastle.com
smothe.today
aisoulspa.com
rentventory.com
oota-group.com
aryuzhou.net
as1-6hg9amazon.com
fracturedmindset.com
Targets
-
-
Target
eaf957fed02fc143802d3eff11d4dddf_JaffaCakes118
-
Size
1.4MB
-
MD5
eaf957fed02fc143802d3eff11d4dddf
-
SHA1
ce04e0cbca0fd7e1abe322a7f94a7eb01ddf72cb
-
SHA256
6a86727505f9aacbb6e9d67445b8e99d23e37d9db46a737e1b2c72274332cb41
-
SHA512
ae164f196583f7a2a6b12a902fa118e30a0f653700c30aa17ab97219b9c5f6eaaad3f765fab89b6ff5da48b521f283c45c73e20d38e76ff6c2c55f99b82df612
-
SSDEEP
12288:zJW/kYR3J9bXwjnA7fUL64zJuk8q0UmA1NzENYgnBKPqSY29oPtrPN4In5VreTCf:fs/vQL4uY
-
Formbook payload
-
Suspicious use of SetThreadContext
-