General
-
Target
JaffaCakes118_fc0b80cf29ba371bcc37a66f913c55a709f72ef20e5321dba831b5da9cc9d19e
-
Size
706KB
-
Sample
241225-vfkcnazkfp
-
MD5
b440affa81df63d75a249570b1200e76
-
SHA1
93bb5232d93d020f67b3d5c701d921dc75e7600e
-
SHA256
fc0b80cf29ba371bcc37a66f913c55a709f72ef20e5321dba831b5da9cc9d19e
-
SHA512
bf47f44f6b086722c4f39855b4389311ea18b98223405d18aea63a6cc2767f1036a6ed66be2302c282a3870469d9e999952aa664a8b63ad0ec8afdf1d634d542
-
SSDEEP
12288:xVdaOGsBWbKthV46hcQvw4uanua2JKHgC1gcTcUHdZJV7EwS4nbpOOHh:jd94mCQ9Tu8v4adbVArGbdh
Static task
static1
Behavioral task
behavioral1
Sample
27c4e4c4bc0fed698e5908c6bf21599ed379fdb743a3d8946846fa19833fef8b.exe
Resource
win7-20240903-en
Malware Config
Extracted
formbook
4.1
b6nt
mecchashonan.com
zzzu9.com
molliebellezza.com
ado-response.com
gurutech.design
gadgetavenuebb.com
ecomoscar.tech
makai-import.com
selotwinmax.xyz
kaihong08.com
biocyberlaw.com
crowdedhr.com
viagradb.online
mtbind.com
zcyq.life
mvideo.contact
brilliantconveyancing.store
onlythexclusive.com
metaverseintegrators.com
xn--ekakb-3x9h.xyz
rivuletfinance.com
defiinterim.com
le-bonz.com
createsurgical.net
meables.xyz
pe-brand.com
bar43siemreap.com
jbj168.com
goldlevelcoach.com
crotroll.com
eric.support
promocrauch.com
grecampus.com
bicupid.site
unitedearthwork.com
4834tkrrek16stvpvgs2999.com
githsubusercontent.com
familyfootcareandmore.com
twmica.xyz
supingstudio.com
pj4782.com
tl-texture.com
yingpaisi.net
fixtheusasource.com
pxsknd.info
0596xpjw.com
tasnimproperty.com
websitebaru.xyz
antakyaucuzarackiralama.com
womenfoodsustainability.com
efg9999.com
btorresins.com
zj530.com
bbegos.com
freepremium4all.com
gloosn.com
onewaypro.com
leijonapaita.com
bioaquapakistan.com
fhbhbb.xyz
viptrade.site
unbontravailleur.be
corapetservices.com
kyzzyk.com
arabiclearnonline.com
Targets
-
-
Target
27c4e4c4bc0fed698e5908c6bf21599ed379fdb743a3d8946846fa19833fef8b
-
Size
878KB
-
MD5
032572e55c25a5d992039e1336d166b3
-
SHA1
675f2af8bae1fec0bd022c0c65afde54c92e2240
-
SHA256
27c4e4c4bc0fed698e5908c6bf21599ed379fdb743a3d8946846fa19833fef8b
-
SHA512
59339428fbec1872d2a4ecad775da9286facee3db1d1078284788b1edc7158f74c2939bed881f2821f2851540fbf5242895125b1737ab86f6acdb61919b7dbb7
-
SSDEEP
24576:QbYPbYPbYPbYPbYPbYEEb1TKtChyfcvR1BeV9tVJm02:Qbububububub01TKtCweeVTVo
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-