General
-
Target
JaffaCakes118_c1d5a5bff8e3ce0a9b30f2c3fb1b13f232251a2d836d84e0a3b025eb79722aac
-
Size
472KB
-
Sample
241222-efsq2aspdq
-
MD5
446f823a10ec856cff12e79e64fcfb40
-
SHA1
2b9c5446b7320ae7d88308541706d156dfc05b49
-
SHA256
c1d5a5bff8e3ce0a9b30f2c3fb1b13f232251a2d836d84e0a3b025eb79722aac
-
SHA512
51a339c5c151b3d1798bc339a6fbc611ce112107f4282f5f095c550f7a154ab97abed3c552e0a5ac4e788e823b06ad6da56ecb3fe8de2bb60697be5d0175b5af
-
SSDEEP
12288:5UTaOhNRe5SXb5tYb53ER+UCEwMtO7+onkcViXZAz9BEOEBSL:5yXNYSXy3/MwM8HV2BSL
Malware Config
Extracted
formbook
4.1
g28p
whhmgs.asia
wellmedcaredirect.net
beggarded.com
wtpjiv.site
todo-celulares.com
parkitny.net
43345.top
pro-genie.com
cwdxz.com
cbc-inc.xyz
healthspots.net
rulil.top
pyramidaudit.solutions
k8sb15.live
hempaware.report
usclink.life
stayefs.net
05262.top
shop-izakaya-jin.com
iccworldcupnews.com
Targets
-
-
Target
7a41ce40c35cb716b149ae68e2fff7e91f8dbb3af2f265c70ba08ce4615853d9.exe
-
Size
509KB
-
MD5
60691b7db92447a946dc55ef638c7b36
-
SHA1
5723fb4e9a46ffd7e8239cc7e0056647e2b62eed
-
SHA256
7a41ce40c35cb716b149ae68e2fff7e91f8dbb3af2f265c70ba08ce4615853d9
-
SHA512
629d80f3f6cd5c91913b66e6aa0a0be329bca6106af0ce1114e35a29b111fc2d6d06149a24d14e590c7fa809da23b118371393f77eff17b4c3cdb52c08b5a574
-
SSDEEP
12288:cEOycvZBc9KAWBZxMHzN9IwOzq5woTWt4lg4X3y07kyLL1XXMQ+2:YdB9DuHbDOeG2g4HzoyLJnM
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-