General
-
Target
JaffaCakes118_c685ec330ab087efbdabca54f967569cbc46de6be29626f03d488eade256ec8a
-
Size
462KB
-
Sample
241226-22pb3avjbr
-
MD5
49553b9294fe1a46676b24680d61ece7
-
SHA1
a9353c8bb8fec94e5f6aafa362855cb7293ecb3d
-
SHA256
c685ec330ab087efbdabca54f967569cbc46de6be29626f03d488eade256ec8a
-
SHA512
802af1ad6b8ed06a2f3551e5d81649edcbe6aaf56a2e3fade7c2302054f61b12b2db9d9d2d8c205c1d94e54e2ec60f7025b83712ea88894f1052bd711eaba6ca
-
SSDEEP
12288:P8R4xWSUvegxlkeSg2+IB5F0NR3Lwan7Y/OC:PCzveuK7aNqana
Malware Config
Extracted
formbook
4.1
as31
satunusanet.com
intro3.xyz
000point.xyz
woreruq.xyz
yoursinglesnetwork.club
zdcqne.cfd
kkbtt.net
aflm1.com
slayback.net
metaverseuropeen.com
teng74.com
insgoat.com
willowgrovecoaching.com
pacwest.com.co
adleadz.info
ericanilsen.com
xdfgoiumk.site
oriondistribution.net
welltempered.xyz
futamatagawa-ekimae-shika.com
Targets
-
-
Target
e4d96258c51cc4e4196c566e116077e7dc443a153e2ab651268ccd09c003d792
-
Size
638KB
-
MD5
af4c1f1515a7e3156c5184ff9a3542f1
-
SHA1
ce0867236704c2e96dc85c4e71b57a3ba9000819
-
SHA256
e4d96258c51cc4e4196c566e116077e7dc443a153e2ab651268ccd09c003d792
-
SHA512
c18536f2158e43e6376b17e4e1e714ae65441b5393a8db4cd2254b25ab7444f0910700ee4767162265bdfccfc40c24476ea3ecc57567cfe5f80c2311ace285ae
-
SSDEEP
12288:46KHHTwWOTn9KtX3Q1H2/75he6bw6LfcQP:YnTaen0HQFU6bw6LkQ
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-