General
-
Target
JaffaCakes118_df0674d98e3d0cc9287628569c2fd7c67f7675dfc378c0b7cbc7fe6843e7255b
-
Size
350KB
-
Sample
241225-z8mqpsxrgv
-
MD5
4e9a3bebba4774abc050196b853716de
-
SHA1
5081cd3555d85764674b2c7ea7402885bd55cc61
-
SHA256
df0674d98e3d0cc9287628569c2fd7c67f7675dfc378c0b7cbc7fe6843e7255b
-
SHA512
0224b0f337a52ca7f189bf7a68b81994482ba083d6af9847671bc87dc6819527fe9d29930af8432ac8ad31150d1003b564f8667761c7feaccb52e4d157dd7679
-
SSDEEP
6144:VP6D7lFC0MXxWUSSOEzoDpbEH9tLGu+Ndsz4AdsXqlisug:VyD7lFCp1z4pct6NNazLGsisug
Malware Config
Extracted
formbook
4.1
ey5a
lygptkl.com
winsentrade.com
bluprintliving.com
yumohealth.com
cherryadulttoys.com
gianttigar.com
maxhutmacher.net
autostokyocorp.com
calvaryload.com
stixxiepix.com
j98152.com
starsky666.xyz
loadkicks.com
designauraspace.com
wwwfmcna.com
mikakonaitopsychologist.com
kristalsuaritma.com
kh180.com
kulturel.net
araveenapark.com
Targets
-
-
Target
8c218c09f446a0db7b5de9bad9aadf285e81b04673a2db6769ccad09e1e6945b
-
Size
392KB
-
MD5
abf477b0f1f223cc754772ea47bdaa44
-
SHA1
c58595a2b39e58436ed35f887e7b230f436967af
-
SHA256
8c218c09f446a0db7b5de9bad9aadf285e81b04673a2db6769ccad09e1e6945b
-
SHA512
2af086a54a6d3384ad1e6633bc525c8a6c74b07e2133d83ce0cb67eb80ccd73a2a65127e1f182ea935ef570b8bcc9420370153071d95f711a966b362748ffaef
-
SSDEEP
6144:Z9O8QFXPDBvcPvbOtnLa1JnTajynM1QqZVVJ+rssBEueQk:vPQncPaEWF1xZTYrWh
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-