General
-
Target
c6d39df2bd4c88a8476bbb501f7f978c_JaffaCakes118
-
Size
358KB
-
Sample
241205-kgm5tswqbz
-
MD5
c6d39df2bd4c88a8476bbb501f7f978c
-
SHA1
4a1b338647c079b607bade54369a78080c9a6c07
-
SHA256
51aea754d13a630858af3a6a340a949edf769b3f6e6ba76e7bd9fbdd8a0ed657
-
SHA512
c617abfd5c5c19d3b72b5cb91cf425d598511165c6f0f1ac7b9daac4c1f351945482dc052f6515931e37910d7c2dc6da21ccb86b62d19aa60e69114af706ee57
-
SSDEEP
6144:1x19xfRz9RzGhN7NLcaI3d4qRo1q0cX2Jje3gsn/2Js3kbC3NDiRzXgbhrUU5OPN:1x1fFTGjRLca8d1G1q0Dgwsn/as3kW9l
Static task
static1
Behavioral task
behavioral1
Sample
c6d39df2bd4c88a8476bbb501f7f978c_JaffaCakes118.exe
Resource
win7-20240729-en
Malware Config
Extracted
formbook
3.9
bd2
coffeeflyer.com
joy-cars.com
excp0st.com
pancakesandprotein.com
teenboys.info
theperfectgiftshop.net
maomao2017.com
musiclabtacoma.com
taskrit.com
pthjxx.com
114man.com
worldsjsj.com
rjpmuztrygwn.online
casinotoponlineplay.technology
tm88z.com
navnoorkang.com
lazydogkennels.net
yisilv.com
usasubels.com
desperatehouse-lives.com
brianbertini.info
sag4bd.com
zahnarzt-rosenheim.info
newspies.com
thefinalexpensegroup.com
wwwjinsha784.com
128hao.com
abesdjc.com
majportfolio.com
travelfoodmustafa.com
indo-mart.com
funlick.net
howstevedidthat.com
katspropertymanagement.com
hzsonata.com
believers.expert
littleapple-vo.com
jmdyljuf.win
exerzonegymgt.com
huichengsl.com
keithdeanjr.com
ybntest699.com
allmandbros.com
maftfw.com
online-attestation.com
fmbzzpx.download
staramway.com
mugzshideout.net
12usy.com
immuno-naturo.com
tractoferguson.com
rjconstrucoesse.com
johnscharrett.business
1517toparis.movie
redpingwinful.net
o31y7g.download
greenwebapps.com
6pinbahis.com
shouyou168.com
globalvalueshopping.com
lfhyblm.com
maisbrasilpublicidade.com
alixzwane.com
pubwild.com
govaj.com
Targets
-
-
Target
c6d39df2bd4c88a8476bbb501f7f978c_JaffaCakes118
-
Size
358KB
-
MD5
c6d39df2bd4c88a8476bbb501f7f978c
-
SHA1
4a1b338647c079b607bade54369a78080c9a6c07
-
SHA256
51aea754d13a630858af3a6a340a949edf769b3f6e6ba76e7bd9fbdd8a0ed657
-
SHA512
c617abfd5c5c19d3b72b5cb91cf425d598511165c6f0f1ac7b9daac4c1f351945482dc052f6515931e37910d7c2dc6da21ccb86b62d19aa60e69114af706ee57
-
SSDEEP
6144:1x19xfRz9RzGhN7NLcaI3d4qRo1q0cX2Jje3gsn/2Js3kbC3NDiRzXgbhrUU5OPN:1x1fFTGjRLca8d1G1q0Dgwsn/as3kW9l
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-