General
-
Target
JaffaCakes118_4002f5e73fb57305b475567dc9b874aab9219e8d105d73ae80c038c4358ee854
-
Size
595KB
-
Sample
241226-vr4wfaslcr
-
MD5
efbbb21f03c71c717e0122ab2317fd46
-
SHA1
7c12bb2c8fa8d73b6421c685b6d19ed560f84278
-
SHA256
4002f5e73fb57305b475567dc9b874aab9219e8d105d73ae80c038c4358ee854
-
SHA512
4b243c7c60053067fb0b5e333fc7cf800f280e2ee89415ed2fe37593a303b28172d781f7c7341544a640d0420243525d68f60028cd1b013522377dc0a87f5ce6
-
SSDEEP
12288:RSc8pH/CEsUSjfpIa7MwOqyCjXPTMZRYhu4r0m:657sUSTaPFmXQnbm
Malware Config
Extracted
formbook
4.1
k02d
thenewworlddiscoveryclub.com
llzwfe.xyz
iymanlanka.com
woojunepark.com
holwetheleam.com
roylc.xyz
squirmed58yum.com
quzupuu.website
laprxa.com
avanlahe.com
sertseks.net
wfows.xyz
ny5622.com
strictlyvulgar.com
modabet801.com
jerryzconsulting.com
idolboat.com
decorbydenielenicol.design
clients-sfr.com
voicesafricamailings.com
Targets
-
-
Target
44ad61b91dc10bd9543918779a57235081fad13eada8330d03994c660be3c9e2
-
Size
684KB
-
MD5
180d0f081c8d2d4cbba592f2c6ef28c6
-
SHA1
12e23e366ef8468131638244a0482a79bccfd839
-
SHA256
44ad61b91dc10bd9543918779a57235081fad13eada8330d03994c660be3c9e2
-
SHA512
6aca9e9229f72bb3e5db249f63cea1276ec837ada8b26aed739d2d9ba314c79a8dfc57518b1e5892bb89708e2012b7dc02f31535a8798f4c73e3526a8ce6abf5
-
SSDEEP
12288:ht1cBZVdEkJqCV5GMqQ5l9b1druq+Vlt3Rm7GMQKF3NGXoi1+rPd44zMWXmoK6:hc1CCVTtlHKt3whPFdG4cwMeTK6
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-