General
-
Target
5da37b461ae4c329da6de8b9bc35709b_JaffaCakes118
-
Size
291KB
-
Sample
241019-vdpjlayekn
-
MD5
5da37b461ae4c329da6de8b9bc35709b
-
SHA1
f2514d654aa685c01f77176186ebab163757530d
-
SHA256
c4d47153405e6371ce64b331bed9178e45c5f54bfba505375d6d8918e68216b9
-
SHA512
24b6d66a5775ca3cdb816725b467a2991b825b7ed8b95ef64f523080ddf911f05198afeb2e30c986f9a208bc334fbb9b00eb21091c705ed5c591d9f437df0462
-
SSDEEP
6144:+nLbAxPs3oamUIsFWbmv3phOsWqRLOy0BxJgLBI:+nHqk3ojAplR6ygYL
Static task
static1
Behavioral task
behavioral1
Sample
5da37b461ae4c329da6de8b9bc35709b_JaffaCakes118.exe
Resource
win7-20241010-en
Malware Config
Extracted
formbook
4.1
c244
ssgasija.com
procyoon.com
mood-street-food.com
yeglifeview.com
baoyai.com
sundarsheni.com
notoli.photography
sweetape.com
ergas.group
asyrill.com
jin188v.com
stlazarushospitalnola.com
dohertyfamily5.com
duniaclubs.club
ngobryles.com
scottsavocasalon.com
unifiui.com
baileyfred.com
nabiagency.com
alyssaternanphotography.com
whitehome-re.com
nitaraine.com
rklogtransportes.com
closetcouturenc.com
day.gallery
suxfi.com
mittikasaman.com
livesupgrade.com
hasbiadam.com
masdelafont-mauguio.com
topadofa.com
humanimmunogenomics.com
exit-blog.com
andersonsignandbannerco.com
ellasween.com
jmycjj.com
dhshk.com
peaceful-dolphin.com
flossydesigns.com
mrevivalkids.com
paintmehappywithcassandra.com
daishuaku.com
c2spot.com
odiaproduct.com
skillfultopshop.com
mentorbp.com
annualchecklist.com
jasaborongan.com
fasttrainheal.com
flatfootedhatting.com
brionreilly.com
ogcaterers.info
uuhlashwe.club
subsidy-kennwort.info
logisticmoversusa.com
houseofkabbalah.com
ahealingjournee.com
diemtinthitruong.com
naturallybossed.com
turksandcaicosdirect.com
hudsonvalleyfinearts.net
brocousa.com
getyourcostsdown.com
liveitupmusic.com
mpaiji.com
Targets
-
-
Target
5da37b461ae4c329da6de8b9bc35709b_JaffaCakes118
-
Size
291KB
-
MD5
5da37b461ae4c329da6de8b9bc35709b
-
SHA1
f2514d654aa685c01f77176186ebab163757530d
-
SHA256
c4d47153405e6371ce64b331bed9178e45c5f54bfba505375d6d8918e68216b9
-
SHA512
24b6d66a5775ca3cdb816725b467a2991b825b7ed8b95ef64f523080ddf911f05198afeb2e30c986f9a208bc334fbb9b00eb21091c705ed5c591d9f437df0462
-
SSDEEP
6144:+nLbAxPs3oamUIsFWbmv3phOsWqRLOy0BxJgLBI:+nHqk3ojAplR6ygYL
-
Formbook payload
-
Suspicious use of SetThreadContext
-