General
-
Target
JaffaCakes118_d35394d358aa37fbd6e6e8e43cd15bdf1fed1d65a35e63a077c10b71ba77f612
-
Size
456KB
-
Sample
241224-ln48cstreq
-
MD5
8d11fc0c0d37abff97007f8cdc99366c
-
SHA1
6003eb81e6118193827735456064f569fc70cfc7
-
SHA256
d35394d358aa37fbd6e6e8e43cd15bdf1fed1d65a35e63a077c10b71ba77f612
-
SHA512
7108979349be257538e5d660e02eba4d5635f762baadb9d538db4b05fa50cc47043316eadb7222eeb5b3336aabfa9c76c0d63ffd5c35eeed8f61f6d61ab2eb57
-
SSDEEP
12288:Fw3p/HGNZ57EtNxyoQFH1uDPFpYCp5RyVT3QX1Uu:63p/H+Z5QrxyoQfur3yVTMUu
Static task
static1
Behavioral task
behavioral1
Sample
ae0ac982f4f70afcbbcffe130163b0d07f53eb4850001dc3e40cdc8921ef05f6.exe
Resource
win7-20241010-en
Malware Config
Extracted
formbook
4.1
ghgn
nongnongqingyi.com
memojav.net
nothingbutallgoods.com
qiubaogu.com
consumeru.net
whitesandretreat.com
protectingtherepublic.com
rkpnews.com
captaincobyscajunseasoning.com
happyfilings.com
mznqa.com
food-truth-app.com
16crystallake.com
theisanitize.com
livefeelinggood.com
skiniences.com
rethgi4.icu
bucky.cloud
massageexchange.club
drshesalipatel.com
empowermentking.com
ssdtest.net
vivid-beats.com
zskdkc.com
pearsonconnexxus.com
freshf.world
tijancompound.com
ljplegal.net
undtctyky.club
bestnewhomeconstruction.com
lcsdgbc.com
wholisticexecutivecoaching.com
installatoricappotto.com
bestweightlosskey.com
thenestkeepers.com
s89sf.com
pupzilas.com
ssgasie.com
funhandwritinganalysis.com
hififa.com
penyaluranpuk05.net
yourautomationsimplified.com
directconnectiontuning.com
twobirdswithonestoned.net
ompeaceloveamen.com
hghat.com
one-san.net
bhaihost.com
dajiangzhibo28.com
roboticstrust.club
inventconsultancy.com
minuit-trois.com
estudiodigitalrc.com
luisxe.info
roadtorainbows.com
cash4yourcart.com
mtae2.icu
bitcoinasks.com
babalawoolaifa.com
omnirera.com
thedesignertravel.com
baersland.com
ace-expertises.com
thisisnotacookbook.com
podseedz.com
Targets
-
-
Target
ae0ac982f4f70afcbbcffe130163b0d07f53eb4850001dc3e40cdc8921ef05f6
-
Size
738KB
-
MD5
bb1daddaf3592e05e82b0ab73e7ecd11
-
SHA1
e50eca290addbe7c13fde7c47f9297a2f4c59815
-
SHA256
ae0ac982f4f70afcbbcffe130163b0d07f53eb4850001dc3e40cdc8921ef05f6
-
SHA512
d38cf4b618e7a7a10ea4bfe2b44c77bab1986d872c3d611dfd3d40b63ce63f6f51e2d1b431ad31530a74230a42fd410eeae1caf17cc117ed0a2366d045a78adb
-
SSDEEP
6144:QyxwvjSY3fhgs3VIH9M7a+KXocVf1OqheTc4wscHLcE89KEaQe5xWwusXjR+C:lEuYPhgPlXJVJeTcRscHwE+reld+C
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-