Overview

overview

10

Static

static

10

JaffaCakes...27.exe

windows7-x64

1

JaffaCakes...27.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_9a30a94b5115dec626b05946fc29dbcca7ac330846b3cd6480063b6561c60027

  • Size

    188KB

  • Sample

    241229-c1qq3azmem

  • MD5

    edbe3a3ac1370d1e184f3df335968544

  • SHA1

    de529c5e4a9584a74a1aac77ed761d5e1c7ab50c

  • SHA256

    9a30a94b5115dec626b05946fc29dbcca7ac330846b3cd6480063b6561c60027

  • SHA512

    ef911b53dbd2e86a0fef7a4ba8cafded5080c9390009e75c0d61092ec8b5dfa6c9b0d82552f8327d4f1f1a335681bffd2d72f3eccefe0dacec65401dda58555f

  • SSDEEP

    3072:+zk5vEQ8LNacT3Eqb5ouqvGVCTzqPJ/8vsmlohDw27iGcNezF:NLC7EE5tquVCTOt8vGV7lcNez

Score
10/10
formbooklt63discoveryrat

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

lt63

Decoy

fortrantelecom.africa

ffafa.buzz

bullybrain.com

ekeisolutions.com

lamiamira.com

noahsark.xyz

beautyby-eve.com

cloudfatory.com

12443.football

hataykultur.online

donqu3.sexy

breakthroughaustralia.com

havengpe.com

cpxlocatup.info

corefourpartners.com

amonefintech.com

thithombo.africa

bassmaty.store

fdshdsr.top

lifesoapsimple.com

Targets

    • Target

      JaffaCakes118_9a30a94b5115dec626b05946fc29dbcca7ac330846b3cd6480063b6561c60027

    • Size

      188KB

    • MD5

      edbe3a3ac1370d1e184f3df335968544

    • SHA1

      de529c5e4a9584a74a1aac77ed761d5e1c7ab50c

    • SHA256

      9a30a94b5115dec626b05946fc29dbcca7ac330846b3cd6480063b6561c60027

    • SHA512

      ef911b53dbd2e86a0fef7a4ba8cafded5080c9390009e75c0d61092ec8b5dfa6c9b0d82552f8327d4f1f1a335681bffd2d72f3eccefe0dacec65401dda58555f

    • SSDEEP

      3072:+zk5vEQ8LNacT3Eqb5ouqvGVCTzqPJ/8vsmlohDw27iGcNezF:NLC7EE5tquVCTOt8vGV7lcNez

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks