General
-
Target
bb40168a6c252bf62ed7b928db2ddca3_JaffaCakes118
-
Size
235KB
-
Sample
241203-cl4pdazqhn
-
MD5
bb40168a6c252bf62ed7b928db2ddca3
-
SHA1
fc0f23691751b63d93d6efbbbdb5ec7e01a07c14
-
SHA256
bd024645f51a267c6d24a75649cb617ac29029d5e9f8a3d8aa8c44b44cf668c9
-
SHA512
5db4268d3d9a539ccaa43f47b73a8b9a3730a5be57d0256c99c855e1a0ce58a525955fa6562d9ff389adc0951a691fd9f280c0b9297a827223361c6dbe92a52c
-
SSDEEP
6144:A89I85FiKeBfbarbNyicAdmXyzLAGkgqBPp02:A864FiKedbAbzIyX3g7
Static task
static1
Behavioral task
behavioral1
Sample
bb40168a6c252bf62ed7b928db2ddca3_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
bb40168a6c252bf62ed7b928db2ddca3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
formbook
4.1
ckvl
buketmert.com
hodu61.net
avenuecaca.com
kays.kitchen
8ky4.com
pretty-zoo.com
ds613.com
sacramentohemorrhoidcenter.com
icbcpd.com
zzinpick.com
cloudtestingrules.com
2020-especial-em-casa.com
lapdwde83.club
misionsanlorenzo.com
neenaknows.com
jlsqjjz.com
cazconstructionservices.com
ashihun75.icu
elvantage.com
youmovies.site
kenpofive.com
zodiacloud.com
cbinventory.com
jkk8.com
nuevamoneda.com
baby-gene.com
corona-flights.com
azxped.com
kinguest.com
drilling.world
lifewithsideofextrahappy.com
musiklektioner.com
nextgenloan.com
bidesat.net
refereetrain.com
onlineshopgr.com
galwooddesign.com
sonesea.com
odysseydawn.com
mf2marketing.com
sasauranai.xyz
eskisehiryaklasim.com
hottradebuzz.com
referralsender.com
dubaidining.com
korupanorama.com
cutbutchery.com
atlerz.com
houseofluxuryorganics.com
fmdllfdlfdfdf.com
soldorse.com
clv-poc-dev.net
jpystablecoin.com
theindianmariners.com
hqprofesional.com
xn--losxvdemissueos-brb.com
primehome-inspections.com
inqueten.com
buzzlocate.com
atomefme.net
ccmponline.com
buscaria.com
naspartners.com
techbun.net
verlan.guru
Targets
-
-
Target
bb40168a6c252bf62ed7b928db2ddca3_JaffaCakes118
-
Size
235KB
-
MD5
bb40168a6c252bf62ed7b928db2ddca3
-
SHA1
fc0f23691751b63d93d6efbbbdb5ec7e01a07c14
-
SHA256
bd024645f51a267c6d24a75649cb617ac29029d5e9f8a3d8aa8c44b44cf668c9
-
SHA512
5db4268d3d9a539ccaa43f47b73a8b9a3730a5be57d0256c99c855e1a0ce58a525955fa6562d9ff389adc0951a691fd9f280c0b9297a827223361c6dbe92a52c
-
SSDEEP
6144:A89I85FiKeBfbarbNyicAdmXyzLAGkgqBPp02:A864FiKedbAbzIyX3g7
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-