General
-
Target
63d45807d6bfb9d7ba0414628c7da25f_JaffaCakes118
-
Size
893KB
-
Sample
241020-xqsswswhkk
-
MD5
63d45807d6bfb9d7ba0414628c7da25f
-
SHA1
b608e3caf85142ac78be24e72d85b1abd54384c0
-
SHA256
5e6cd5d639ae3b9425d3e11ded2ba9b054bd28903e7c9ae7b1702a89fc66b953
-
SHA512
19b615e00ff55288716f854ba49ee69283573fb5695f63e4eb94ec93391b6dcacda9b5714a5de986eaddfb8d1122a454118b0e4785b102432659c8df4fb283d7
-
SSDEEP
12288:V4h/HK7zmpwMjsmrkjmnGXnu8IBpwYL5cyiq3COst23iVAh6UFQxC5KPkkkzwNu/:9ybAufLXlIL2X6UqxCU8wr
Static task
static1
Behavioral task
behavioral1
Sample
63d45807d6bfb9d7ba0414628c7da25f_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
formbook
4.1
bkbk
myzshouse.com
elimabd.com
iandiphoto.com
k9yhf.com
lalaandthelight.com
spearteam6.com
tdv29mayiskoleji.net
senthamizholi.com
toprooferelpaso.com
homegraphicdesign.com
formas-de-ganar-dinero.online
psgvsfreelive.com
xclusivedispatch.com
qdhizwlti.icu
hananomi24.com
seikobaby.com
cursosinemlinea.com
vintage-transport.com
billings-identify.com
simplepartyplanning.com
haucouture.com
atlerz.com
guiefer.com
chichome65.com
quick360realty.com
pixcelstories.com
mdaestheticspa.com
kansasyouthdental.com
zikarak.art
ourrf.com
vytalcorp.com
t2snatural.com
hotfor.net
peking-global.com
ericrichardkrusenstjerna.com
funkeheatexchangers.com
grey.pro
lovelocalbox.com
playfactle.com
egmpl.com
chuyenlavungnui.online
hanbaoxin.com
rsj-radiosanjoaquinlaserena.com
therednecktribe.com
radiosupermixperu.com
kickfootpain.com
andromedapharm.com
sorbitosderon.com
miriamsmagic.com
finneyindustries.com
cantouhandletheheat.com
runningconseilanglet.com
sanvicentebythesea.com
gao.travel
kaamvashikaran.com
techcreez.xyz
iandepackaging.com
realtyworldplatinum.com
pornmovies.website
shopmpjames.com
izixh.com
xtshuixin.com
831compliance.com
getmauijustice.com
aozhengaodi.com
Targets
-
-
Target
63d45807d6bfb9d7ba0414628c7da25f_JaffaCakes118
-
Size
893KB
-
MD5
63d45807d6bfb9d7ba0414628c7da25f
-
SHA1
b608e3caf85142ac78be24e72d85b1abd54384c0
-
SHA256
5e6cd5d639ae3b9425d3e11ded2ba9b054bd28903e7c9ae7b1702a89fc66b953
-
SHA512
19b615e00ff55288716f854ba49ee69283573fb5695f63e4eb94ec93391b6dcacda9b5714a5de986eaddfb8d1122a454118b0e4785b102432659c8df4fb283d7
-
SSDEEP
12288:V4h/HK7zmpwMjsmrkjmnGXnu8IBpwYL5cyiq3COst23iVAh6UFQxC5KPkkkzwNu/:9ybAufLXlIL2X6UqxCU8wr
-
Formbook payload
-
Suspicious use of SetThreadContext
-