General
-
Target
f704788608711d14f5f6c20d7939088a_JaffaCakes118
-
Size
744KB
-
Sample
240925-2v83wssdnq
-
MD5
f704788608711d14f5f6c20d7939088a
-
SHA1
29a06d1b0cc4231f90ec612a70804ba0b8b37d5a
-
SHA256
faf33adac687fbb353a51437c8efacf4ccd94153c4f9514dc31a905a8d4a2f52
-
SHA512
ddd77d64888b0734709c3136050cc7f5182c67bd197ae1ea4ae258a09605e0859d30587b7573ddf7648dd3231bdccb52582242f42a37d1cb5c4018a622a84ebc
-
SSDEEP
12288:C1eRRAfxCIUnyNOI/SN/HWQZUpO0ZTaEb33zDbr1ClM4Z3C:kiRO8nyNOI0u7bT/Hm
Static task
static1
Behavioral task
behavioral1
Sample
f704788608711d14f5f6c20d7939088a_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
formbook
4.1
kb09
chautan.com
23hills.com
shop-the-top.xyz
danceleadsunlimited.com
harusnegaskas.com
commandserviceman.com
radio-advertisement.com
2gounlock.com
doblenudobylvillamesa.com
vz199.com
infiniteheartandsoul.com
bluemountainbeachbrewery.com
ushealthvisa.com
exposition-lovo.com
ibdgsolutions.com
hauskaat.com
constantpowerco.com
dgbaisi.com
lenderexpo.com
murrimurrdi.com
plungepleasure.com
bocai985.com
gmkurumsal.com
voyixadontom.xyz
nigeriantimeline.com
servidorwebdedicado.online
tapinservicesllc.com
iatexsac.com
clubfurries.com
c04eekebs.online
wex-mu.com
khachsanthinhphuongnam.com
expertsdigitalmedia.com
lawrencecountylawyers.com
airbraketool.com
drshubhadeepdas.com
stretchmarqueesuk.com
aomqhdym.icu
agenciasupercriativa.com
kosmolottobingo.com
xn--7dbdns7b.xn--9dbq2a
tenartgmp.com
youroffernextdoor.com
retiredurango.com
seramikdentalimplant.com
cashxchanger.com
whatsnewsonline2day.com
ultimatecatnutrtion.com
latitudeconsultoria.net
meetmermelada.xyz
oubtdk.com
etldatasolutions.com
fujiyamalewisburg.com
garcical.com
girl-cum.com
ebosr.com
canna-sight.com
techomsolutions.com
kentsolarenergy.com
vanuatublog.com
18couch.online
merchandgifts.com
theebeautifulbroken.info
333bjs.com
johnson80.info
Targets
-
-
Target
f704788608711d14f5f6c20d7939088a_JaffaCakes118
-
Size
744KB
-
MD5
f704788608711d14f5f6c20d7939088a
-
SHA1
29a06d1b0cc4231f90ec612a70804ba0b8b37d5a
-
SHA256
faf33adac687fbb353a51437c8efacf4ccd94153c4f9514dc31a905a8d4a2f52
-
SHA512
ddd77d64888b0734709c3136050cc7f5182c67bd197ae1ea4ae258a09605e0859d30587b7573ddf7648dd3231bdccb52582242f42a37d1cb5c4018a622a84ebc
-
SSDEEP
12288:C1eRRAfxCIUnyNOI/SN/HWQZUpO0ZTaEb33zDbr1ClM4Z3C:kiRO8nyNOI0u7bT/Hm
-
Formbook payload
-
Suspicious use of SetThreadContext
-