General
-
Target
09ef9306539a1cd532d9985f3a2856a6_JaffaCakes118
-
Size
726KB
-
Sample
241002-k5xn6sybkm
-
MD5
09ef9306539a1cd532d9985f3a2856a6
-
SHA1
3b2c26fff9fbdd0f44eb7d06400c7b0db5c2241b
-
SHA256
9b47637ecdf8e69614cb8ab22f9bddc0cc1719eca7f6ae87b0e988b9fb1cfdce
-
SHA512
e25d7ac4323e52ad13e9f9729f3a626f2d325d5990a0687fd1f59b87e06b9bca107c2fe5ac12c3a7c1dd92342c2b0887271f101dfd721f862b83de1048c5960b
-
SSDEEP
12288:jXfpEdonTdVMYlCZ/PbrabB5wCeSS6l/r1HWW6uPh7zZh5:jXfpEdonTdu8a/PbrkB5wVSBl/r1HWWP
Static task
static1
Behavioral task
behavioral1
Sample
09ef9306539a1cd532d9985f3a2856a6_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
formbook
3.8
private
evilunderworldmall.com
davidovicmirko.com
incrediblechildrenscostume.com
langsgo.com
ibex-japan.com
findhotel.coupons
logo8536.com
meyerparkdental.com
digitaltoken.exchange
chatramuetaiwan.com
yulibao.net
michaelandcolaw.com
sapeur-hairfactory.net
louisianamodernsmiles.com
finleighelderton.com
knlwpaj.download
directorionacionaldesalud.com
sdasdfasdfasdf45.com
hefeihuli.com
woxa.ltd
daisymejia.com
performiles.win
eldrqs.online
becharrisbasketball.com
khsalon.com
simplysassygifts.com
mobilitiamoci.com
tfcmag.com
nordicfurnituregroup.online
quotelotus.com
arte-busca.com
gutsonmarketing.com
aaronlosty.com
underfood.com
puyuanfabu.com
mindybrowndc.com
looimail.com
envycustomdesigns.com
tienmanhtien.com
texaspetpantry.info
thelouzanperfumes.com
winboxs.com
hydragrc.com
6462644.info
e01k0m.info
xmzytx.com
ohnm3.info
carental-ltd.com
phonecasery.com
eavanmcsweeney.com
psflowers1.com
adaione.com
zrvhfc.top
edjamesphotography.com
aidanpawson.com
shoeonlinestores.com
cuibida.net
bebidasaltoimpacto.com
ordosglrl.com
palatine.house
thosedirected.com
printerpoqe.men
tistory2.com
365lafei.com
lossubway.com
Targets
-
-
Target
09ef9306539a1cd532d9985f3a2856a6_JaffaCakes118
-
Size
726KB
-
MD5
09ef9306539a1cd532d9985f3a2856a6
-
SHA1
3b2c26fff9fbdd0f44eb7d06400c7b0db5c2241b
-
SHA256
9b47637ecdf8e69614cb8ab22f9bddc0cc1719eca7f6ae87b0e988b9fb1cfdce
-
SHA512
e25d7ac4323e52ad13e9f9729f3a626f2d325d5990a0687fd1f59b87e06b9bca107c2fe5ac12c3a7c1dd92342c2b0887271f101dfd721f862b83de1048c5960b
-
SSDEEP
12288:jXfpEdonTdVMYlCZ/PbrabB5wCeSS6l/r1HWW6uPh7zZh5:jXfpEdonTdu8a/PbrkB5wVSBl/r1HWWP
-
Formbook payload
-
Suspicious use of SetThreadContext
-