General
-
Target
bd2c6dc178b0c292a9f6d62a1c4121a4_JaffaCakes118
-
Size
1.4MB
-
Sample
241203-nkgzrstjfy
-
MD5
bd2c6dc178b0c292a9f6d62a1c4121a4
-
SHA1
c404a10b1aa3a7717dccdef2c4928575df91d520
-
SHA256
878730d98ca2b265653a8c94f41fbb35a564fd36453a04c830d7c59a626f633e
-
SHA512
ab4b9301e6cd3d7c2c4e26d2f4c3149b8be9560f89348b52db91370bd409b72746c47bab7e289d3ed05eaf07bedf12284b6ac52caf057e6a0f8cf2f2656ac51d
-
SSDEEP
24576:c/Osi4KToMMxTJNglRgymzIiQGNuFH6T2fX/vO9:Hsi4KToJIlRbIXLuFH6T2/
Static task
static1
Behavioral task
behavioral1
Sample
bd2c6dc178b0c292a9f6d62a1c4121a4_JaffaCakes118.exe
Resource
win7-20240729-en
Malware Config
Extracted
formbook
4.1
mxwf
orders-cialis.info
auctionorbuy.com
meanmugsamore.com
yachtcrewmark.com
sacredkashilifestudio.net
themintyard.com
bragafoods.com
sierp.com
hausofdeme.com
anthonyjames915.com
bajardepesoencasa.com
marciaroyal.com
earringlifter.com
dsdjfhd9ddksa1as.info
bmzproekt.com
employmentbc.com
ptsdtreatment.space
vrchance.com
cnrongding.com
welovelit.com
intercourierdelivery.services
ianwhitewrite.com
afcerd.com
beneficiodemedicare.com
gatel3ess.com
salesnksportswt.top
thewellnessloft365.com
totensa.com
jessicatheisen.com
snowtographers.com
executrainpr.com
puttypaw.com
popcorntimeipad.com
heyconi.com
llanoresources.com
ibusinesshero.com
1euro1ad.com
sparkleeapp.com
zhuxiugyh.com
calvinmaphoto.com
bjmaomao.com
isaacfujiki.com
zipwhipper.com
kontrollstutzen.com
hannaheason.media
zgcbw.net
letteringdagabi.com
kitefabrics.com
andherieastoffices.com
thewellnesstravelcompany.info
ohio.works
beacharita.com
alphamillls.com
sassandvinegar.com
usauber.com
ceylonherbslk.com
richardggreenhill.com
groupdae.com
jupiterccc.com
indoovo.com
sunnytheodora.com
gxpgfz.com
shoppandaxpress.com
heiboard.com
zahnimplantatangebotede.com
Targets
-
-
Target
bd2c6dc178b0c292a9f6d62a1c4121a4_JaffaCakes118
-
Size
1.4MB
-
MD5
bd2c6dc178b0c292a9f6d62a1c4121a4
-
SHA1
c404a10b1aa3a7717dccdef2c4928575df91d520
-
SHA256
878730d98ca2b265653a8c94f41fbb35a564fd36453a04c830d7c59a626f633e
-
SHA512
ab4b9301e6cd3d7c2c4e26d2f4c3149b8be9560f89348b52db91370bd409b72746c47bab7e289d3ed05eaf07bedf12284b6ac52caf057e6a0f8cf2f2656ac51d
-
SSDEEP
24576:c/Osi4KToMMxTJNglRgymzIiQGNuFH6T2fX/vO9:Hsi4KToJIlRbIXLuFH6T2/
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-