General
-
Target
JaffaCakes118_841bae2dc530052caa7792ef242cc3baf8feb5f7329e772080fc773e800fd21b
-
Size
789KB
-
Sample
241226-3xq6jawjam
-
MD5
3b2a1c7b0d8451c20827fb10a4e7103b
-
SHA1
65205af0189b511f704873cca6fa23d77fc5c86c
-
SHA256
841bae2dc530052caa7792ef242cc3baf8feb5f7329e772080fc773e800fd21b
-
SHA512
1818e555b653fb19d7b809bdae8bf2bcbe9455ac5135f702f60275ec5c1258c3e79c2c02d40df042da2026ce82ffe7357806f6d581ba1b7b87f3f5eb507c773e
-
SSDEEP
24576:ehSQsjmSlEYu+qN4BZ/N4yiOJ/svzLlLfr8sfrEd+rzShb4tk3UM:e4jBEYF2IF4jy/svz5P0+rCl3UM
Malware Config
Extracted
formbook
4.1
b3gc
weirdkult.com
thake.design
knittingandcrochetcraft.com
salurkoyu.com
petchoiceus.com
qemtnpcrr.icu
bjqgrd.com
mencariasdjegreggf.com
stiffler16cm.com
sleeperhut.com
bnos-iq.com
kakeprints.com
legalizetx.com
mrdjfuzz.com
udidzone.com
foundyourauto.email
stlouisshelf.com
thegoodmanagerproject.com
refund-uktax.com
baonian-design.com
Targets
-
-
Target
0dd71b416418079bff4bad29f3e4799d9bda2ce728187e99ef3f9fe7ea449781.bin
-
Size
826KB
-
MD5
1c2d54ab422f55cd61c6abe3f3b2e758
-
SHA1
ea778902f541bfc7270f976e133c71411e9a7b12
-
SHA256
0dd71b416418079bff4bad29f3e4799d9bda2ce728187e99ef3f9fe7ea449781
-
SHA512
a15e94cc90fd3affd4048ffd2c6aba24e795f6ee0b146166169893dbb9ec9ef1fabf54ec58c95aae7ca5aea1cc5f123d93d5d00c5fdb5046a730e1cb1b6dc425
-
SSDEEP
24576:10S9LL4Qq7iC9cy3Zj/YL2fpMGxNhmfygyuDUpHUWB:uS9Lvqey3ZTYL0xNhm6gBIpHUWB
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
CustAttr .NET packer
Detects CustAttr .NET packer in memory.
-
Formbook payload
-
Suspicious use of SetThreadContext
-