General
-
Target
JaffaCakes118_6583b41e19009f110948b3815173b7d236b7e35000da13459c7f8f53493b4659
-
Size
650KB
-
Sample
241230-c443vsvqcq
-
MD5
642acd901e3efb3017ed1c608aef53f3
-
SHA1
b13d35b43891f6a79e90c90138c9134dd5bcfa95
-
SHA256
6583b41e19009f110948b3815173b7d236b7e35000da13459c7f8f53493b4659
-
SHA512
1e7bf23949b038cdb00a9b158d263b9738a5746a8c9b16766451ea0cba76c3fce8d6cfd8046cf17ae0c579adf43f9fe38eea957f14402d9af37549140789438f
-
SSDEEP
12288:OEOkLvJJBOM7dHJmy71FvHB0bEJlVlwXLVQfZ8IxJmr/enbDuWbP61LlVZ0:OEOkL8M7xwUF2cQXgqrAuWbP0LlVZ0
Malware Config
Extracted
formbook
4.1
awqu
soltwin24horas.com
kaiget.com
majalahlangitan.com
preventable.top
caronandtom.com
2222k06.com
hdrezkart54ff.net
supermessage.xyz
dezeenb.com
bestatakes.xyz
californiasportsbar.com
hxg66.xyz
localxgirl.online
educ-ability.com
b2breferralshop.online
miamicollisioncenter.com
bjcxqcdb.com
barrineauparkbees.com
robotics6.com
web-bastler.com
Targets
-
-
Target
b8278bf8900a451a507c52e5fe3e886cf2ee5b3f65488eaf9c288318e0fd52a8.exe
-
Size
1010KB
-
MD5
2aea248b2b590adf9f002bf12b8e7b88
-
SHA1
dfbb2f6619eddb467c77ea3cdab16085ccd391cf
-
SHA256
b8278bf8900a451a507c52e5fe3e886cf2ee5b3f65488eaf9c288318e0fd52a8
-
SHA512
2dd8799069f983587aa71facd5f7a68177a64c37a5c9ca1aff204c95753334f8c15ea68078aaa86faaeb2e274199577f9948a2ad537e16d125dfd1048cb0f9f4
-
SSDEEP
12288:s8rBWShXDy2iN5vjR1J6vpqnAoLzwW4CkvBYZxMulVr0fQ+NNBymuH37j7Qu:zzy1foBMAoLzT4CGBYZeAVofAmi7j7Q
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-