General
-
Target
JaffaCakes118_b1c436a46f8d07d3624ddff94346d38ff0349fd55c9eef4be0185a61b840b491
-
Size
929KB
-
Sample
241224-sbpqgazpdq
-
MD5
5169a66e103b9ae847af49ecf8efb193
-
SHA1
44e891e64c62e6109f2b33c15a077b5c35214a1b
-
SHA256
b1c436a46f8d07d3624ddff94346d38ff0349fd55c9eef4be0185a61b840b491
-
SHA512
b628c682ce36a196f085d972043343ef164c680a0baa1198ff88f5c38010e25c79466d76698caa5238ab307d0fed45938f6a851ecf1320d562326032179bbfa3
-
SSDEEP
24576:asyK6fzapeIn3KUWcNz5HCgni/16cCDmg3:asyK6fzape86UtRCQi/16f
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_b1c436a46f8d07d3624ddff94346d38ff0349fd55c9eef4be0185a61b840b491.exe
Resource
win7-20240903-en
Malware Config
Extracted
formbook
4.1
g9s4
visitmechanic.com
xn--kck4a7gpd474vx6i.com
prozdorovie.online
omatpupa.xyz
zamokwakhekhumalo.com
mayuraandchris.com
wanasahstore.com
bicicletas.win
yhdm61.com
mortgageattract.com
centuryofbio.com
xtdkgjt.com
nhahangnetnghe.com
whatsappsemcontato.com
onlinemarketing-teamwebus.com
zuevu.com
dancaronmusic.com
tingseo.com
uniflapline.com
setuppharmaweb.online
tunerdiesel.com
jetfreqs.com
magnusempire.com
lxmetal.ltd
ldexhibit.com
takainna.com
vaocation.com
jk0078.com
youniversoulconsciousness.com
healthcarehaven.com
sorecly.online
prosale.xyz
klevr.tech
kaderarslan.com
selmagreen.com
peoplesbank.xyz
codekaro.com
7882.direct
vglyph.com
uznalimoskwa.xyz
valeriemariotte.com
m2review.com
roamkyoto.com
shilohscentral.com
helmpartner.com
beindaily.com
hvacbodles.com
lacky-traveler.com
agccapitalsolutions.com
tussuncivky.xyz
incorp18.com
northernfernlifestyle.com
thought-full-ness.com
riobetcasino-qi.xyz
cloud-scanifly.com
scheveningenbnb.site
asphaltlake.biz
hanleydevelopments.com
indosloter88.net
keyuchen.site
infoborges.tech
dampits.biz
suicideuas.com
cabinnap.com
tibetcnm.info
Targets
-
-
Target
JaffaCakes118_b1c436a46f8d07d3624ddff94346d38ff0349fd55c9eef4be0185a61b840b491
-
Size
929KB
-
MD5
5169a66e103b9ae847af49ecf8efb193
-
SHA1
44e891e64c62e6109f2b33c15a077b5c35214a1b
-
SHA256
b1c436a46f8d07d3624ddff94346d38ff0349fd55c9eef4be0185a61b840b491
-
SHA512
b628c682ce36a196f085d972043343ef164c680a0baa1198ff88f5c38010e25c79466d76698caa5238ab307d0fed45938f6a851ecf1320d562326032179bbfa3
-
SSDEEP
24576:asyK6fzapeIn3KUWcNz5HCgni/16cCDmg3:asyK6fzape86UtRCQi/16f
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-