General
-
Target
JaffaCakes118_6496b359fec14328feb83ccae07d113476e9e382204c88b5829ba17f96ef2d02
-
Size
373KB
-
Sample
241223-1rfrhaspdm
-
MD5
1c189b871abf4fe0df4420772d11add1
-
SHA1
f01b2fbc0da579c23e171850ff13bbb53039ae9e
-
SHA256
6496b359fec14328feb83ccae07d113476e9e382204c88b5829ba17f96ef2d02
-
SHA512
784a69b9fa016c99e7d6abc15a2a446e09249bdc6577ddcabc8c2212e05122f0f392c109aaf6b32c145e1b4371371eed16b5ceb73494ee3e0c9726aa87cea85a
-
SSDEEP
6144:OOrWuijzUAkV7PQld9lzJ2H8n6eVxJVPAG22O9j8RZKuQrVXnwo6nOZjX:trxivtkBShDJyG2xGZKuQrVgvnOZT
Malware Config
Extracted
formbook
4.1
m8g9
jimmycamel.com
bestinvilnius.com
diana-jarvis.com
manabitown.net
luxuryremyhair.com
cavesage.com
wholequote.space
truckdrivingfuture.xyz
ptcouponspt.com
stainthree-shift.space
universalstaffingpros.com
alibi-music.com
iqjlylro.com
pinterestservice.com
soolehayeiran.com
youngplatformpro.com
fidelitysafesecure.com
af258.wine
theblissdynamic.com
aliciabrooksenglishmastiff.com
Targets
-
-
Target
cc465d4d567ae58c8d25ff7d4e51c1b5c7b33e801517e3cf660e9a1c80e6f57c
-
Size
417KB
-
MD5
37fb2bd58342a1c5f533a567da920b9f
-
SHA1
cbf12b95467160f7d08654e6ffe08a3d560b0550
-
SHA256
cc465d4d567ae58c8d25ff7d4e51c1b5c7b33e801517e3cf660e9a1c80e6f57c
-
SHA512
1e7497780ec7a38ccf66ea1013e58cf0d396face9ad01c0fcc419deffa772ca5fbccbacdb02676892bfe27f7acc4df585363b300eefb2c7448a680a60d80c48e
-
SSDEEP
12288:hGVHcVM5qWjFsYO4izI46lqiTZUoCCs3XV:UcVM5qWNyk4w7dUoCCsHV
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-