Overview

overview

10

Static

static

10

JaffaCakes...aa.exe

windows7-x64

1

JaffaCakes...aa.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_9f778bc1137f1dacf2f476af670c256677231c03d564dae1ef0bc798011362aa

  • Size

    188KB

  • Sample

    241230-1tfjhstkcz

  • MD5

    1fb58c36a3aadc1e7181caf5935ba1d7

  • SHA1

    b731ad2511341255da71602cbabbb21a221f548e

  • SHA256

    9f778bc1137f1dacf2f476af670c256677231c03d564dae1ef0bc798011362aa

  • SHA512

    9d069602821c5a7fbe80844db73341245d0c4887df19e598ca510b5cdaf0c77716f1160f548f5204b90aa7c8a73cbec6ef166010a0bc162396d1f79302020960

  • SSDEEP

    3072:tUCEP/4HR1kVb3iim4Z0Q6FDXK/kIMSZXO4roUfHNII1:6/4azip8H6FDXGVXnlfNIc

Score
10/10
formbookm0d4discoveryrat

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

m0d4

Decoy

prettyhairdivas.mobi

cityblocksnft.com

laraqiiz.com

mubarakdigitalmedia.com

perstockholm.com

xn--imprio-dva.site

baigouw.com

support-client-video.com

phomas.info

dengedizayn.com

zoommachone.xyz

houseoflancasterhours.com

petarungslot.website

tyrs-it.com

dalianzhuchiren.com

tenthgenerationtorah.com

portres.online

1-minute.store

shikakunazo.com

veymes.store

Targets

    • Target

      JaffaCakes118_9f778bc1137f1dacf2f476af670c256677231c03d564dae1ef0bc798011362aa

    • Size

      188KB

    • MD5

      1fb58c36a3aadc1e7181caf5935ba1d7

    • SHA1

      b731ad2511341255da71602cbabbb21a221f548e

    • SHA256

      9f778bc1137f1dacf2f476af670c256677231c03d564dae1ef0bc798011362aa

    • SHA512

      9d069602821c5a7fbe80844db73341245d0c4887df19e598ca510b5cdaf0c77716f1160f548f5204b90aa7c8a73cbec6ef166010a0bc162396d1f79302020960

    • SSDEEP

      3072:tUCEP/4HR1kVb3iim4Z0Q6FDXK/kIMSZXO4roUfHNII1:6/4azip8H6FDXGVXnlfNIc

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks