General
-
Target
JaffaCakes118_3e47adc44ab8138a334d496761d54300dd54a8be85d57fcee07c0cf00ec675f8
-
Size
510KB
-
Sample
241222-l8sp3atpdx
-
MD5
1b1e1f553c64c859e6bd53320669362e
-
SHA1
defb76768bc28a369bb41e42aa69d834319eaf95
-
SHA256
3e47adc44ab8138a334d496761d54300dd54a8be85d57fcee07c0cf00ec675f8
-
SHA512
4f6f65f5ac8d418c32fde036be85d4a6dee531b8a711af92d88224ea95508068c6ab10a8cef3756374e7e277d71df7f544aca49296debd006a9d06e2b8deb805
-
SSDEEP
12288:zswfUXH7I3K5dFvg1hkqoIy9dekhcEN0sZRG9f23/2:dfI8K5dF+kqoIyfezEN0sZQ6e
Static task
static1
Behavioral task
behavioral1
Sample
Inquiry.exe
Resource
win7-20241010-en
Malware Config
Extracted
formbook
4.1
useb
houseofbooksae.net
ipjfeugo.xyz
sandiegowavefc.store
kamerynemehiel.com
herbalhealthalert.com
nfmedco.com
dorhop.com
bookingscenter.com
blaclyteproductions.com
novatel-network.com
locomotionprogramming.com
dotchocolatebars.com
rohanyat.online
a2detail.com
cotedazurpropertyforsale.com
space-vantage.space
averysanswers.com
lionheartimagery.com
nozincwadi.com
lovemyduck.com
photo-marvelous.top
fermers.club
cryptoinvestyl.com
element-light.com
gayko.info
padison8t.com
anysignals.net
regitcare.com
debthlp.com
plantwar.xyz
global-shopings.com
scanitqr-qa.com
atlanticshipsupply.com
igaangstupio.quest
itmaje.com
mantas.digital
zscyyds.xyz
rigsforyou.com
sisliekinciler.xyz
joe-tzu.com
fantacyfreshwaterfishing.com
ahhyxf.com
xn--2o2b91fi2lwkl.com
bbusinesstransformation.com
isobgc.biz
eaglesaviationexperience.net
ascensionsbyidina.com
dailycid.com
moiseevadaria.xyz
knowtecnology.com
magokoro-sekkotsushinkyuin.com
securitybigbroperu.com
alissanoume.xyz
messybunsbaking.net
smartandpro.com
casino-mate1.com
satexch9.com
jphsouthernboutique.com
ongreleaf.store
o4jiokor5.xyz
sairafashions.xyz
cartaovirtual.net
pastsmarthomes.com
copud.com
sale-stihl.com
Targets
-
-
Target
Inquiry.exe
-
Size
798KB
-
MD5
0b447963dc90968b1347008e33794a82
-
SHA1
f1a14274172348c9fc5fe91d7f687680d72497bc
-
SHA256
8b32acdc8173d7d80ebca1697b1bb6132f3d54a981141a982a3f9e95d5adc297
-
SHA512
eebce941706a5b11b3306587375ee04cc2ea107065c8a15809a1b9cb8f223dba6f4661824e21546fb77ee778b70fadcd4509f338811df0ab485f02ebddd184dc
-
SSDEEP
24576:jD4VHfQe6ZyWshg+qbZxTZZWunAWvysjg75HCek6ZFLENlg:hSsCieHLENq
-
Formbook family
-
Formbook payload
-
Deletes itself
-
Suspicious use of SetThreadContext
-