General
-
Target
078c1e70ed25852b3dae1f984f501278_JaffaCakes118
-
Size
358KB
-
Sample
241001-1mxjfssaqk
-
MD5
078c1e70ed25852b3dae1f984f501278
-
SHA1
4f6e56d77769566cc95eb81443d0eedb67176f01
-
SHA256
217e843645ed39f10c63ac98870d3cca85e5f296186f6c25262bbf8bb2f95985
-
SHA512
c62c66f8e7661d80fb7ee1eb7e5d80ab61cf160c833930f594c9ad3b20635867a5f7caa973299dd452b59c0c1868ea57a222b739d833e2e1a4184a5e170a8b40
-
SSDEEP
6144:Zx19xfRz9RzGhN7NLcaI3d4qRo1q0cX2Jje3gsn/2Js3kbC3NDiRzXgbhrUU5OPQ:Zx1fFTGjRLca8d1G1q0Dgwsn/as3kW91
Static task
static1
Behavioral task
behavioral1
Sample
078c1e70ed25852b3dae1f984f501278_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
formbook
3.9
bd2
coffeeflyer.com
joy-cars.com
excp0st.com
pancakesandprotein.com
teenboys.info
theperfectgiftshop.net
maomao2017.com
musiclabtacoma.com
taskrit.com
pthjxx.com
114man.com
worldsjsj.com
rjpmuztrygwn.online
casinotoponlineplay.technology
tm88z.com
navnoorkang.com
lazydogkennels.net
yisilv.com
usasubels.com
desperatehouse-lives.com
brianbertini.info
sag4bd.com
zahnarzt-rosenheim.info
newspies.com
thefinalexpensegroup.com
wwwjinsha784.com
128hao.com
abesdjc.com
majportfolio.com
travelfoodmustafa.com
indo-mart.com
funlick.net
howstevedidthat.com
katspropertymanagement.com
hzsonata.com
believers.expert
littleapple-vo.com
jmdyljuf.win
exerzonegymgt.com
huichengsl.com
keithdeanjr.com
ybntest699.com
allmandbros.com
maftfw.com
online-attestation.com
fmbzzpx.download
staramway.com
mugzshideout.net
12usy.com
immuno-naturo.com
tractoferguson.com
rjconstrucoesse.com
johnscharrett.business
1517toparis.movie
redpingwinful.net
o31y7g.download
greenwebapps.com
6pinbahis.com
shouyou168.com
globalvalueshopping.com
lfhyblm.com
maisbrasilpublicidade.com
alixzwane.com
pubwild.com
govaj.com
Targets
-
-
Target
078c1e70ed25852b3dae1f984f501278_JaffaCakes118
-
Size
358KB
-
MD5
078c1e70ed25852b3dae1f984f501278
-
SHA1
4f6e56d77769566cc95eb81443d0eedb67176f01
-
SHA256
217e843645ed39f10c63ac98870d3cca85e5f296186f6c25262bbf8bb2f95985
-
SHA512
c62c66f8e7661d80fb7ee1eb7e5d80ab61cf160c833930f594c9ad3b20635867a5f7caa973299dd452b59c0c1868ea57a222b739d833e2e1a4184a5e170a8b40
-
SSDEEP
6144:Zx19xfRz9RzGhN7NLcaI3d4qRo1q0cX2Jje3gsn/2Js3kbC3NDiRzXgbhrUU5OPQ:Zx1fFTGjRLca8d1G1q0Dgwsn/as3kW91
-
Formbook payload
-
Suspicious use of SetThreadContext
-