General
-
Target
c691f8063e79e19fa95073108f499b5c_JaffaCakes118
-
Size
279KB
-
Sample
241205-h8g2sazqcl
-
MD5
c691f8063e79e19fa95073108f499b5c
-
SHA1
f31d24fa592152a6ad2db064eab64652e313ad0d
-
SHA256
3cc059736bda2e682c4695af39797d7e32d853db835377647abfb850452d43ad
-
SHA512
b5afa2d9c1de870a4a9efad4f57cf6182ffb605c2e678519e0a7ccdbaac62421a4029f0466758ea576b546c6babbd5758129f5f8530d4156b4f0518d8ca2f788
-
SSDEEP
6144:5fLl0j/eF+aXHTwqYxyjp9zgOOUvtahUyjz6j:5fKsXUqZPzIUHj
Static task
static1
Behavioral task
behavioral1
Sample
c691f8063e79e19fa95073108f499b5c_JaffaCakes118.exe
Resource
win7-20241023-en
Malware Config
Extracted
formbook
4.1
p7t8
bretttaylorphotography.com
wishestodreams.com
tinycase.xyz
delawarewebuyhousescash.com
tiennghimini.com
pechnolight.com
sportslivepaly.com
healthygut365.com
briarpatchgrief.com
thenaturalyoushop.com
paulmackaydop.com
psbetongroup.com
luxuosy.com
sesmaseguros.com
mywhyismenow.info
responsivesleepcoaching.com
dokebimetal.com
goodnightfarms.com
fusionhomepackers.com
tiktok-generatofr.com
sportlivery.com
visibilitycrowdfunding.com
rugpat.com
shipu112.com
motion-creatives.com
call2thai.com
wasafatsahla.com
modrs.club
strawberrylinebikehire.com
myhomebizopps.com
wish-dev.com
opulnet.com
thinkinglady.com
crystalopp.com
teasfranchise.com
filledbasket.com
simplyfabevents.com
uchicagojobs.com
elgaleonmarisqueria.com
tjdxiovpha.com
superlifeindia.net
nationsimprint.com
sugarrushpastry.com
imtheonlyperson.digital
usisinvest.com
saleb2c.com
ukcarers.net
rantingy.com
goimang-4gviettel.site
cornerstonejetmanagement.com
kgforu.com
nomascovid-19.com
coinpusher.info
miyoshi.estate
strollingdigital.com
veto4701.com
newenglandshoppingshow.com
w-virginia-real-estate.com
traumaturn.com
bluezipperluggage.com
trx2021.com
networkcafenj.com
hotelesdeoferta.com
quantumhbs.com
zijdarbook.com
Targets
-
-
Target
c691f8063e79e19fa95073108f499b5c_JaffaCakes118
-
Size
279KB
-
MD5
c691f8063e79e19fa95073108f499b5c
-
SHA1
f31d24fa592152a6ad2db064eab64652e313ad0d
-
SHA256
3cc059736bda2e682c4695af39797d7e32d853db835377647abfb850452d43ad
-
SHA512
b5afa2d9c1de870a4a9efad4f57cf6182ffb605c2e678519e0a7ccdbaac62421a4029f0466758ea576b546c6babbd5758129f5f8530d4156b4f0518d8ca2f788
-
SSDEEP
6144:5fLl0j/eF+aXHTwqYxyjp9zgOOUvtahUyjz6j:5fKsXUqZPzIUHj
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-