General
-
Target
JaffaCakes118_db9f25fb75c540c9e3a7a51f43417709db7ce74b552a3b97cbc785d4df15790f
-
Size
616KB
-
Sample
241223-xajkaaxmer
-
MD5
2a22fa07e1d24aa0f7cc7398b43f4236
-
SHA1
16b064ae00e8add7582272d971f3c5ce97fb240a
-
SHA256
db9f25fb75c540c9e3a7a51f43417709db7ce74b552a3b97cbc785d4df15790f
-
SHA512
2a805555715d51f070b3206f9bfbac079947953906b8363121e247505a0ccbbd605c52c61cec7ddf6fb109d0da44212fec8c17de55f5b49268d9f4b18ddbb274
-
SSDEEP
12288:89yGtIErnT+KlXWaEDjAYE9434JSRIXFq8jFiZUUYX59kxPLFnUzWnWJ:8gGGErnTlEPAYwSC13cZEXLsFnUzWn2
Malware Config
Extracted
formbook
4.1
v05y
vlastasamsonth.com
swankyeaters.com
digitalstar.info
katouchcommodity.com
armyworm51pud.com
shazhou.xyz
literatureforscience.com
nemitchel.com
embodiedwomanhood.com
clearoneadvange.com
cres.network
stanbicserv.com
theazted.com
trochumotorsltd.com
danielleclamare.com
solotime111.com
fancyproduct.space
starlinkinvestltd.com
famanhico.xyz
mgzz093.xyz
Targets
-
-
Target
b479031f60b7199b24937d75aed26bc7bab0c3a20a8f79cd18d89a69c8ba8fe1
-
Size
738KB
-
MD5
aeb7c4a1980beda13861ec919daacec8
-
SHA1
240df48558a0a96ce28c4f330951d68f9fb47ef7
-
SHA256
b479031f60b7199b24937d75aed26bc7bab0c3a20a8f79cd18d89a69c8ba8fe1
-
SHA512
d992ed2f63afb26587b607b8c0dbc077b40986d34234c1adb011b9df4dbdc38c3347a2fa42e8b290d8246f5fa3ee1b310a9d747540b31f0455f6682424a5d8ce
-
SSDEEP
12288:B+w6SIcd1AaaPTiQMSzHYf+yGyJnwm7k9Ha60QruW+9OIo03haKv:Iwz07TFMAUJ3J5kEqpA9v
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-