General
-
Target
ed67a014369cbf061b4464b77c3765c0_JaffaCakes118
-
Size
764KB
-
Sample
240920-mm6v8ssalf
-
MD5
ed67a014369cbf061b4464b77c3765c0
-
SHA1
ee4eccd455b179d3b62aa5b813d6def9f40d0f67
-
SHA256
85dc1d019667588686df02bc9e2ab3b40730bc826404669e0c2c70b27d679407
-
SHA512
3d8e06276fd9eef01d50c756e8bdea6c5fd4220defc1e793c8c6078babaab630f676b0e7b06d7f32ef6cad24dd5667759dcdbb27dd62e7e861b6da39bc3e61d3
-
SSDEEP
12288:AYIjfe/f3oHPabS8qV/z2cuDqZxZYYut:AY733oHyrq9z2G
Static task
static1
Behavioral task
behavioral1
Sample
ed67a014369cbf061b4464b77c3765c0_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
formbook
3.9
pe
blackcatproud.com
kddgu.info
jhholiday.com
woshunwang.com
qrvou.info
yinuojie.com
404arabs.com
diaojieorg.com
hsyfjj.com
medusabotanicals.com
ghay5c.com
wm785.com
bikeandart.com
ygyroadside.info
whitewings.biz
4pointpartnersbv.com
tukangsedotwc.net
democrataward.com
systemtraffic2updating.win
thevlu.com
wbwxfw.com
angeladiscountmall.com
sisarservices.com
bajaringantangerang.com
betwin0000.com
spectrumreachdata.com
czzzw.com
aquaristik-ratgeber.com
caroloverland.com
heartygiftz.com
wanli118.com
ellieenichen.com
xn--fiqs8sxwbx9y.com
sergunsolarmarket.com
shuyiren.com
allsystemsupgradesnew.review
radiomenina.com
dbsdgc.link
fudaoshidai.com
bankratestoday.com
birch.media
saddesklunchclub.com
heretale.com
nela-art.com
koolmugz.com
recruitmydigitalpeople.guru
isitstable.com
sthonghu.com
savewithdaverna.com
netmaniacs.net
super-disco.com
desibazao.com
kdframingdrywall.com
rescuingtheperishing.com
silo.fund
mailitunes.com
china6ix.net
zohulu.com
computeremporium-mail.net
vfhzaogjgu.info
yysajp.com
buypropecia-generic.com
cryptbooks.com
gewoongoede-atikels.info
xymakdoc.com
Targets
-
-
Target
ed67a014369cbf061b4464b77c3765c0_JaffaCakes118
-
Size
764KB
-
MD5
ed67a014369cbf061b4464b77c3765c0
-
SHA1
ee4eccd455b179d3b62aa5b813d6def9f40d0f67
-
SHA256
85dc1d019667588686df02bc9e2ab3b40730bc826404669e0c2c70b27d679407
-
SHA512
3d8e06276fd9eef01d50c756e8bdea6c5fd4220defc1e793c8c6078babaab630f676b0e7b06d7f32ef6cad24dd5667759dcdbb27dd62e7e861b6da39bc3e61d3
-
SSDEEP
12288:AYIjfe/f3oHPabS8qV/z2cuDqZxZYYut:AY733oHyrq9z2G
-
Formbook payload
-
Suspicious use of SetThreadContext
-