General
-
Target
JaffaCakes118_eadea737742084d7776c7a6fa0ff4dd6dd3cfe7459fc7e4fbe87b5c2c18c39f6
-
Size
400KB
-
Sample
241230-c9qgnavrhl
-
MD5
331e3a11031b1d7fbde42daec62e1266
-
SHA1
4a900fc75b843db98dfddade6bad461f26caba96
-
SHA256
eadea737742084d7776c7a6fa0ff4dd6dd3cfe7459fc7e4fbe87b5c2c18c39f6
-
SHA512
741a370140d425c77ec9e0f731d06e001445d79683e9f9df9b6887de7443d871ef60417eca45f016e14ab7677bdc46b8f9c3536c29ed9b77266d9330039def14
-
SSDEEP
6144:cArb9+osxxoUZdYQ1/X2akzSBCvwgJKL/KEOPvvZD4Beqcr6SA0BcL2neAja8g4h:cArbEosdERi2EWvZD4BZcuSt7eAjdgU
Static task
static1
Behavioral task
behavioral1
Sample
Items for new project-6109.exe
Resource
win7-20241023-en
Malware Config
Extracted
formbook
4.1
wk31
soroban.xyz
irfirstaid.com
irsaycollection.com
thebardownstairsasheville.com
facebookmeta.business
paypalsupportclient.com
metaversusfacebook.com
litakparuikamazon.com
rivianmotorcompany.com
metaversepro.us
ikramfamilypractice.com
bitcoinfuturesetfs.online
5donline.com
rosemount.us
nicole-steinfort.com
performanceautorepairsj.com
scrabblecheats.us
kjg67amazon.com
formerlyknownasfacebook.com
youtubeandgooglepay.online
alexaequipos.com
iboxmeta.com
metaverse-google.com
shadowinformedtherapist.com
com-ibb.co
blueapplesindia.com
globalsxports.com
myfirstxboxgame.com
irsaymuseum.net
alexanderbransoncommercial.com
akive.kr
facebooktometa.com
ko-bae.com
sunnyleoneporn.xyz
harborverse.com
metaversum.us
microsoftsingles.com
arcam.us
cannatomorrow.net
teslacarbattery.info
wellsfarrgorewards.com
rescuemefirstaid.com
blackdiamondwellingtonfl.com
solusvenator.com
managemylif.com
metafirstcoin.com
alexanderferency.com
mutfilms.com
fedex-express-parcels.com
wellnessfirst-pembroke.ca
authsecurre02.bid
meta-spacex.com
meta-nascar.com
stelladot.us
yaruky.xyz
bitfarms.xyz
airsoftmeta.com
firststepcenter.net
scottdunn.voyage
zenubium.us
healthplans2023.com
metamorphosisfacebook.com
facebooksecurity.cloud
sebaspfc.com
firstho.com
Targets
-
-
Target
Items for new project-6109.exe
-
Size
519KB
-
MD5
7b2b82719683d8edaf37ec6bd895976f
-
SHA1
bda795d0e7993179ab7606142ea445d9d73872e9
-
SHA256
f500da8f49bd849bb4f6aa7644458bc0473a47e8ce91a09df137906b429e2ee8
-
SHA512
79b9eea7f65ff9a0410842d1b09a5dd550c8573044d016adb1539f646b86c7212b436133f0b991f0e72c7b14a0f8b08f7df64dd938359953270979955e6625ba
-
SSDEEP
12288:LCZhz3tD005nQeOEPEbEiX4FuQWout8FVNLpA:LCZhjC0I2DJUQjFVN
-
Formbook family
-
Formbook payload
-
Deletes itself
-
Suspicious use of SetThreadContext
-