General
-
Target
a7d906e300e394d87092e5915aae4218_JaffaCakes118
-
Size
1.0MB
-
Sample
241127-pmnqrszmbr
-
MD5
a7d906e300e394d87092e5915aae4218
-
SHA1
fb9386cc654c66257c150e2f3fad96cb6f6f62ab
-
SHA256
4c3c596f1205356635a9ff0ad1a179f8c739cd9e4026085e091d5bd0d0173067
-
SHA512
ad7e32fcbfc4afbe7465b953902a209a53c43622c09f56de16e4145017295026b3146e0a124a9131fc7383fdfbda693530bfadea2bc5e2273eb0f1dcc9b1938d
-
SSDEEP
24576:HlKZPp9AR95yifpU0ZBq2EEUZdvdwsJwYiBkXMGl:aPpKRyCBqvEsvdwsJwYi7G
Static task
static1
Behavioral task
behavioral1
Sample
a7d906e300e394d87092e5915aae4218_JaffaCakes118.exe
Resource
win7-20241010-en
Malware Config
Extracted
formbook
4.1
bkbk
myzshouse.com
elimabd.com
iandiphoto.com
k9yhf.com
lalaandthelight.com
spearteam6.com
tdv29mayiskoleji.net
senthamizholi.com
toprooferelpaso.com
homegraphicdesign.com
formas-de-ganar-dinero.online
psgvsfreelive.com
xclusivedispatch.com
qdhizwlti.icu
hananomi24.com
seikobaby.com
cursosinemlinea.com
vintage-transport.com
billings-identify.com
simplepartyplanning.com
haucouture.com
atlerz.com
guiefer.com
chichome65.com
quick360realty.com
pixcelstories.com
mdaestheticspa.com
kansasyouthdental.com
zikarak.art
ourrf.com
vytalcorp.com
t2snatural.com
hotfor.net
peking-global.com
ericrichardkrusenstjerna.com
funkeheatexchangers.com
grey.pro
lovelocalbox.com
playfactle.com
egmpl.com
chuyenlavungnui.online
hanbaoxin.com
rsj-radiosanjoaquinlaserena.com
therednecktribe.com
radiosupermixperu.com
kickfootpain.com
andromedapharm.com
sorbitosderon.com
miriamsmagic.com
finneyindustries.com
cantouhandletheheat.com
runningconseilanglet.com
sanvicentebythesea.com
gao.travel
kaamvashikaran.com
techcreez.xyz
iandepackaging.com
realtyworldplatinum.com
pornmovies.website
shopmpjames.com
izixh.com
xtshuixin.com
831compliance.com
getmauijustice.com
aozhengaodi.com
Targets
-
-
Target
a7d906e300e394d87092e5915aae4218_JaffaCakes118
-
Size
1.0MB
-
MD5
a7d906e300e394d87092e5915aae4218
-
SHA1
fb9386cc654c66257c150e2f3fad96cb6f6f62ab
-
SHA256
4c3c596f1205356635a9ff0ad1a179f8c739cd9e4026085e091d5bd0d0173067
-
SHA512
ad7e32fcbfc4afbe7465b953902a209a53c43622c09f56de16e4145017295026b3146e0a124a9131fc7383fdfbda693530bfadea2bc5e2273eb0f1dcc9b1938d
-
SSDEEP
24576:HlKZPp9AR95yifpU0ZBq2EEUZdvdwsJwYiBkXMGl:aPpKRyCBqvEsvdwsJwYi7G
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-