General
-
Target
fc9a7d91c44b35ac45235cbd428d5f71_JaffaCakes118
-
Size
428KB
-
Sample
240928-szpqdawapd
-
MD5
fc9a7d91c44b35ac45235cbd428d5f71
-
SHA1
3a2306041f07ac63b24375f2393cdcaae4a9aff2
-
SHA256
10a9aab39489aa507d35bb18b357ca6c9f8642d8fa27fc1ad9c7de03c8e9415d
-
SHA512
d235cd67e1e74675a1adaeffc89df82b2314dcb0d8f67887a9b9b0d14e9f3a0bd5c6c3df47ed08e6ab7f5de879be32b8434aa1843647b911629018db1312bdfc
-
SSDEEP
12288:QnOLBomnNZTudDLhkNbjPNUg6zhDn1ShWOi:QnkymnN6SNXWg6z91AWOi
Static task
static1
Behavioral task
behavioral1
Sample
fc9a7d91c44b35ac45235cbd428d5f71_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
formbook
4.1
cmg
bestessentialcare.com
lemonguild.com
veronabling.com
omvzshop.com
austingutterrepair.com
noracbn.com
shizukis.com
keatingfreelanceservice.com
teamtobook.com
mqcsegurosyfinanzas.com
t-chou-pino-v.com
yuyunst.com
ctlaltignite.com
zinaidaphoto.com
ag-gis.com
hdollars.net
usa-zuche.com
opexsoftwaresupport.com
kaizenseed.com
thejoyshare.com
educatormannq.com
virtualproductionthailand.com
penwitz.com
statestreetphillips.com
qjzcn.com
dltlogisticsllc.com
ski-onderhoud.com
blinklabs.net
swissinterest.com
cnweinixi.com
x2emails.xyz
champagneparcel.com
magikgrocery.com
pbqjm.com
happypetsy.com
visiongovtexam.com
4980012550430251.com
isfully.com
1252nancarrowway.com
distillexplorer.com
call4cement.com
novelcrm.com
beddaganawetlandpark.com
asset-sunrise.com
pluslovefashions.com
job-scribe.com
xtremhunt.com
lockandkeyesthetics.com
numou.international
5616pacific.com
mypronline.com
weightlossteletherapy.com
lausois.com
shipu278.com
crabbytoes.com
reiki-organit-stube.com
secundariatecnica86.com
netsupportcloud.com
directmask.supplies
ntervenehealth.com
awkfree.net
acreslands.com
rsyueda.com
somebunny-new.com
gardunomx.com
Targets
-
-
Target
fc9a7d91c44b35ac45235cbd428d5f71_JaffaCakes118
-
Size
428KB
-
MD5
fc9a7d91c44b35ac45235cbd428d5f71
-
SHA1
3a2306041f07ac63b24375f2393cdcaae4a9aff2
-
SHA256
10a9aab39489aa507d35bb18b357ca6c9f8642d8fa27fc1ad9c7de03c8e9415d
-
SHA512
d235cd67e1e74675a1adaeffc89df82b2314dcb0d8f67887a9b9b0d14e9f3a0bd5c6c3df47ed08e6ab7f5de879be32b8434aa1843647b911629018db1312bdfc
-
SSDEEP
12288:QnOLBomnNZTudDLhkNbjPNUg6zhDn1ShWOi:QnkymnN6SNXWg6z91AWOi
-
Formbook payload
-
Suspicious use of SetThreadContext
-