General
-
Target
JaffaCakes118_b2ade87d1115cd8c87f2123904b7e1f70d19cb5427beee55717edd79d0cec1b5
-
Size
3.4MB
-
Sample
241226-3vttmsvren
-
MD5
2597aad8b6e87c9bd5ac41ea822eb4e5
-
SHA1
a0a3d2718cf75f418515f6c7501266f1e72b4180
-
SHA256
b2ade87d1115cd8c87f2123904b7e1f70d19cb5427beee55717edd79d0cec1b5
-
SHA512
4bd3e3a16397535e74c767c4f6805cbfab690c1ce564af2414e17095d84f60c150ac94d1a377c19b60498aad376b2d0b6fb42ac627a9eb6bb522e1afff19cc3f
-
SSDEEP
24576:Deyu1D6gZd7X2hnLjFwoJBrZoHirzba01/L19fKbokYxuh7t5kB4xQ8C:h
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_b2ade87d1115cd8c87f2123904b7e1f70d19cb5427beee55717edd79d0cec1b5.ps1
Resource
win7-20240729-en
Malware Config
Extracted
formbook
4.1
wg02
w7c6ppie.xyz
wu6gurfbh74f.xyz
spirtualfreakofficial.com
xn--qvru1fc1gq6i.com
flyingstallionltd.com
travelinternationalnorway.com
legeny.online
geloreal.com
unekemindsacademy.com
ingrossobeauty.online
thebansheeriga.com
bumsb.com
shestampsnotaryservice.com
flipsideattorney.com
heathlytrim.com
upku.xyz
xn--nalemlak-55a.com
jkigroups.com
revitalisequalityfinishes.com
bellaterrahobbs.com
hydd.xyz
eimeaclass118.com
mpccandlecompany.com
viagrafuerfrauen.com
caerrebuilder.com
cleansprays.com
shezzas50th.com
mortgagepipe.com
dealdashs.com
technohimlab.com
gls-paralegals.com
corcient.com
777pussy.com
liftnowwinelater.com
120mir.com
xn--cess69bt7al23h.xn--czru2d
chanthanh.net
achaty-prime.com
blumenhex.com
owners.plus
amanmehandidesigner.com
podlegac62.site
ettoreludovica.com
sembilanbaraenergi.com
woporrjp.xyz
activewithlauren.com
agglutinatesmicromanagers.xyz
dbiroatan.com
myplushnow.com
maplewood.one
datingmarry.xyz
tungstenfog.com
coachwithcece.com
solarandappliancepros.net
keyemanagementservices.com
pearsandpartridges.com
chikacompany.com
taroudant-24.com
helpforyou992.rest
mkheal.com
ajehso.com
bmvga.com
trustpartners-sr.com
nendroid.space
antonioprelati.com
Targets
-
-
Target
JaffaCakes118_b2ade87d1115cd8c87f2123904b7e1f70d19cb5427beee55717edd79d0cec1b5
-
Size
3.4MB
-
MD5
2597aad8b6e87c9bd5ac41ea822eb4e5
-
SHA1
a0a3d2718cf75f418515f6c7501266f1e72b4180
-
SHA256
b2ade87d1115cd8c87f2123904b7e1f70d19cb5427beee55717edd79d0cec1b5
-
SHA512
4bd3e3a16397535e74c767c4f6805cbfab690c1ce564af2414e17095d84f60c150ac94d1a377c19b60498aad376b2d0b6fb42ac627a9eb6bb522e1afff19cc3f
-
SSDEEP
24576:Deyu1D6gZd7X2hnLjFwoJBrZoHirzba01/L19fKbokYxuh7t5kB4xQ8C:h
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-