Overview

overview

10

Static

static

10

JaffaCakes...d5.exe

windows7-x64

1

JaffaCakes...d5.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_0b14d93623f76addd1ee5295cdf878f8f670d323c545850ab5ae1b410de862d5

  • Size

    188KB

  • Sample

    241222-pb6gfaxrcp

  • MD5

    11dae7f4e00a5a68fc76999fb29730e0

  • SHA1

    0380d71bb1cedcc9c3d2c664abc0a5371726a49b

  • SHA256

    0b14d93623f76addd1ee5295cdf878f8f670d323c545850ab5ae1b410de862d5

  • SHA512

    02621cec28a8a5968c69d871dfb0dc7eec40a583c6cc3747e065dca76d7e272bcad9b625cb43d87ba355042931fedf752580c6267e462c1ea245a140ab276a92

  • SSDEEP

    3072:/ZAEBiS2TGbUVK3pk/vp5ahwUCaTkMgYkimKw1W4+KaS9:MgSMpivraSUCangjjKw1ivS9

Score
10/10
formbooks2i9discoveryrat

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

s2i9

Decoy

entmaker.com

kailaifangchan.com

feldnergroup.online

snapcalculators.com

strongflmoms.com

ic0niqrealestateinvestors.co.uk

scuba4fun.online

cheickbaharou.com

4295c.xyz

xn--80adydm6a.com

692825.com

bdrgzfgsvpbq.xyz

sym88.com

xn--seniorhlsan-r8a.com

laproyet.xyz

peoplesnames.xyz

planeats.com

pbrmyn.com

filmstreamings.info

cncpm.net

Targets

    • Target

      JaffaCakes118_0b14d93623f76addd1ee5295cdf878f8f670d323c545850ab5ae1b410de862d5

    • Size

      188KB

    • MD5

      11dae7f4e00a5a68fc76999fb29730e0

    • SHA1

      0380d71bb1cedcc9c3d2c664abc0a5371726a49b

    • SHA256

      0b14d93623f76addd1ee5295cdf878f8f670d323c545850ab5ae1b410de862d5

    • SHA512

      02621cec28a8a5968c69d871dfb0dc7eec40a583c6cc3747e065dca76d7e272bcad9b625cb43d87ba355042931fedf752580c6267e462c1ea245a140ab276a92

    • SSDEEP

      3072:/ZAEBiS2TGbUVK3pk/vp5ahwUCaTkMgYkimKw1W4+KaS9:MgSMpivraSUCangjjKw1ivS9

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks