General
-
Target
d5de1d131caf6d485680510898e1d1bf_JaffaCakes118
-
Size
295KB
-
Sample
241208-h4k8msxjdt
-
MD5
d5de1d131caf6d485680510898e1d1bf
-
SHA1
e0fb9ca230e0723440c43fd208f36f63956d2dcf
-
SHA256
92c3ce5b263bedf0e55723eff317e03c62586173fed419e4f62f26c19835b4c5
-
SHA512
2a1f556726ed46633ec65108cdbff948ec753bb74d6fb535437b613689a211d120f1aa61eb430ce60bf4856bcfbf2ffca1ca970bee8de413099008cb2493515e
-
SSDEEP
6144:JaYslR8Np2xRgWoriDZvKO2FXztZe6lUnKkSX9nllhVQoijpWy:JaYslmpOUuvh2LlUKkWllhVQph
Static task
static1
Behavioral task
behavioral1
Sample
d5de1d131caf6d485680510898e1d1bf_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
d5de1d131caf6d485680510898e1d1bf_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
formbook
4.1
lt0h
originalindigofurniture.co.uk
fl6588.com
acecademy.com
yaerofinerindalnalising.com
mendilovic.online
rishenght.com
famlees.com
myhomeofficemarket.com
bouquetarabia.com
chrisbani.com
freebandslegally.com
hernandezinsurancegroup.net
slicedandfresh.com
apnathikanas.com
chadhatesyou.com
ansilsas.com
in3development.com
nitiren.net
peespn.com
valengz.com
theseakelpcompany.com
tlcrentny.com
sancakcraft.com
kamenb.com
samanthajobenson.com
alphagearz.com
sprins.net
adestramentos.com
civoconstruction.com
masrmasr.com
jagrit.codes
zusammenurlaub.com
mssjqs.com
ic695niu001.com
anelimplus.com
mutlob.com
beyondmickey.net
sliever.club
perfumefashion.icu
massimilianogiannocco.com
dentoncountyattorneys.media
filigreefilly.com
mooremgmtandcompany.com
smpdj.com
stainlesspropmgmt.com
creativecollectivecommunity.com
dmdrogist.com
spokenandheardpodcast.com
garenbid.com
bestcomandcalls.space
tairunshihua.com
nemski-projekt.com
6mum.com
portlandhemorrhoidcenter.com
platinumforsale.net
driven.plus
ontheedgeoutdoorshunting.com
manatapmasalalu.com
idscustomprinting.com
safepassagereform.com
fairop.xyz
natetacticz.com
etoys-sucks.com
rhinolabs.net
bulverderoofing.com
Targets
-
-
Target
d5de1d131caf6d485680510898e1d1bf_JaffaCakes118
-
Size
295KB
-
MD5
d5de1d131caf6d485680510898e1d1bf
-
SHA1
e0fb9ca230e0723440c43fd208f36f63956d2dcf
-
SHA256
92c3ce5b263bedf0e55723eff317e03c62586173fed419e4f62f26c19835b4c5
-
SHA512
2a1f556726ed46633ec65108cdbff948ec753bb74d6fb535437b613689a211d120f1aa61eb430ce60bf4856bcfbf2ffca1ca970bee8de413099008cb2493515e
-
SSDEEP
6144:JaYslR8Np2xRgWoriDZvKO2FXztZe6lUnKkSX9nllhVQoijpWy:JaYslmpOUuvh2LlUKkWllhVQph
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-