General
-
Target
4f3166df8a983e08948f066db754bf07_JaffaCakes118
-
Size
927KB
-
Sample
241016-1ltq6svbph
-
MD5
4f3166df8a983e08948f066db754bf07
-
SHA1
ae408b256eee4391535a6e965fa9df5858731b55
-
SHA256
4cc3c108df5e861d0fb0dcc7f4bcf8c7d717636204f5e0d242a316ce9475bf4a
-
SHA512
ad1b17515cba647dba74d97bd90f152bd42339962721233382692e6caa2be3fd65de5c30d7c47b711ce5f2e4fc5734fb7f0b055a8eff298e0ba0f294888bca46
-
SSDEEP
24576:HTLNnHzTuuJwS8xsniyXVVmX9IgK3KboM:HThnHzTL2DCiOcNI560M
Static task
static1
Behavioral task
behavioral1
Sample
4f3166df8a983e08948f066db754bf07_JaffaCakes118.exe
Resource
win7-20240729-en
Malware Config
Extracted
formbook
4.1
amb6
segurocars.com
rylautosales.com
xinglinjiankang.com
dantil-brand.com
sofaloffa.club
coinclub2.com
ez-pens.com
gqtlqsw.com
robotnewswire.com
ktproductreviews.com
merchbrander.com
yesonamendmentb.com
losgatoslimos.com
kristincole.art
metalmaids.online
leftcoastmodels.com
athetheist.com
jblbusrtingsale.com
chungcugiarehcm.com
renblockchain.com
bigdaddy.fish
comproliverton.pro
gzmove.com
honeythymeherbfarm.com
davinescosmetics.com
9355693.com
movinmemphis901.com
patriotsrs.net
dagelijkseschoenen.com
a-want-ad.site
theodbox.com
audioky.net
hopematthewsrealtor.com
theonlinemoneymachine.com
misakiti.com
ad-yalong.com
mikealazo.com
marianoterra.com
shivorja.com
goodvibrationswindchimes.com
pecom-deliverry.online
amlexcel.com
emeralddrumcompany.com
dalipaella.com
shopcamacci.com
xucaiwujin.com
bxs5000.com
2en1institut.com
zxzm47-wj.com
builttek.com
66400yy.com
beegraze.com
thedottedcat.com
komsah.com
4202nsacramentoav.info
88q27.com
toriengenharia.com
briscoewelding.com
brookelenzi.com
tribaltrash.com
bidtas.com
shokhorror.com
bodurm.com
333.wiki
shopjempress.com
Targets
-
-
Target
4f3166df8a983e08948f066db754bf07_JaffaCakes118
-
Size
927KB
-
MD5
4f3166df8a983e08948f066db754bf07
-
SHA1
ae408b256eee4391535a6e965fa9df5858731b55
-
SHA256
4cc3c108df5e861d0fb0dcc7f4bcf8c7d717636204f5e0d242a316ce9475bf4a
-
SHA512
ad1b17515cba647dba74d97bd90f152bd42339962721233382692e6caa2be3fd65de5c30d7c47b711ce5f2e4fc5734fb7f0b055a8eff298e0ba0f294888bca46
-
SSDEEP
24576:HTLNnHzTuuJwS8xsniyXVVmX9IgK3KboM:HThnHzTL2DCiOcNI560M
-
Formbook payload
-
Suspicious use of SetThreadContext
-