General
-
Target
ca78d54d548798fcf44988d3a89433fd_JaffaCakes118
-
Size
345KB
-
Sample
241206-cchqjstph1
-
MD5
ca78d54d548798fcf44988d3a89433fd
-
SHA1
de519e152e3274523c23d58303f049509be2484e
-
SHA256
d12401aff6e577ad268923a0310d09931870ad0f5c557245376ca0487e4be96d
-
SHA512
3841d4e9ae04a2b277637f9cf0f8e18fbe1db4e7fd4ff1dbafbf82f663337113fff98cfc6f0a101922798fd69c51d33b01e5c014248f12330ec2f6cadefb43c0
-
SSDEEP
6144:idy13tEFvM4Mh/K7v97Z2gVdnkcvpkQHrsPMPVNTS8eAWn7woJQnsviWrX6O:idyT6vM4Mhy7RZvVG6fHBVNTSxAiUiWW
Static task
static1
Behavioral task
behavioral1
Sample
ca78d54d548798fcf44988d3a89433fd_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
formbook
4.1
k1rc
manchesterflowerwalls.com
hyperhostns.info
leverj.exchange
bringcovidhome.com
natalieball.com
glaseye.com
buyersmeetsellers.net
dronerealestate.net
calfwag.com
hoodhippy.com
prophunting.com
yange03.com
ffpgv.top
valengz.com
handbagsbreeze.com
excellencepi.com
iopsms.xyz
farmacykauai.com
dmarc.press
aridham.com
laive.chat
yenisarkisi.com
step1clean.com
templabels.com
zimmerkauf.com
pussyfarts69.com
crewe-tech.com
registergamers.com
yourgafflettings.com
novitadelgiorno.com
mayberrycommunities.com
boldae.com
utikejt.com
purple.gifts
findmyiphone.services
eagle-rock-real-estate.com
abundando.com
paysamba.com
4860p.com
airlinesfm.com
radiosta.com
scrippshealthprivacynotice.com
toughershop.com
xn--sllskapsdjur-gcb.com
wyattwillgetbetter.com
borwoo-packaging.com
testcomp8260.com
infomediosdigital.com
top10musicmarketing.com
gwokath.com
filledbasket.com
azaza.store
townsendcomics.net
sarahhariri.com
xn--kipinpaja-z2a.com
richmondpistolpermit.com
wildeliving.net
emmonsfororegon.com
leorisingcreative.com
teach.wine
alpha-psych.com
sans35studios.com
loty-hd.com
seekingyours.com
fbrblog.com
Targets
-
-
Target
ca78d54d548798fcf44988d3a89433fd_JaffaCakes118
-
Size
345KB
-
MD5
ca78d54d548798fcf44988d3a89433fd
-
SHA1
de519e152e3274523c23d58303f049509be2484e
-
SHA256
d12401aff6e577ad268923a0310d09931870ad0f5c557245376ca0487e4be96d
-
SHA512
3841d4e9ae04a2b277637f9cf0f8e18fbe1db4e7fd4ff1dbafbf82f663337113fff98cfc6f0a101922798fd69c51d33b01e5c014248f12330ec2f6cadefb43c0
-
SSDEEP
6144:idy13tEFvM4Mh/K7v97Z2gVdnkcvpkQHrsPMPVNTS8eAWn7woJQnsviWrX6O:idyT6vM4Mhy7RZvVG6fHBVNTSxAiUiWW
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-