Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_b23c8de2a3a56e2fb8bacb085dbd9d19
-
Size
821KB
-
Sample
250108-2999hazper
-
MD5
b23c8de2a3a56e2fb8bacb085dbd9d19
-
SHA1
5957dbee0b2b200110787aac267be09bcecbeda2
-
SHA256
027eae741aaf031d2edcdc08920457e4c2e641c33847d67705d791f124b7781e
-
SHA512
a696b8e4cdbca841f2ecae342d8aa61c9ac9adc0849e69c715f3f3ce7b5195711bf4a22ad8c2add5bf1962d6a6cb18b751abbe73711699bce59199bd09ad2a63
-
SSDEEP
12288:kx/qRSt2dKOvWmr8VI7FitZ+TaioANCif4hdMkuvMNptn0UxqJFTP5ijOE0FPgOe:kxyvKOvLr8K7FiCTaiS1vaqqFM
Malware Config
Extracted
formbook
4.1
mo9n
circuit-town.com
stock-high.xyz
barlindelivery.com
littletoucans.com
bright-tailor.com
firsthandcares.com
ecompropeller.com
circuitoalberghiero.net
creative-egyptps.com
bitracks56.com
douhonghong.com
fingertipcollection.com
happy-bihada.space
blockchainairdropreward.com
xn--reljame-jwa.com
polloycarnesdelivery.com
d22.group
eslamshahrservice.com
vanzing.com
juzide.com
Targets
-
-
Target
JaffaCakes118_b23c8de2a3a56e2fb8bacb085dbd9d19
-
Size
821KB
-
MD5
b23c8de2a3a56e2fb8bacb085dbd9d19
-
SHA1
5957dbee0b2b200110787aac267be09bcecbeda2
-
SHA256
027eae741aaf031d2edcdc08920457e4c2e641c33847d67705d791f124b7781e
-
SHA512
a696b8e4cdbca841f2ecae342d8aa61c9ac9adc0849e69c715f3f3ce7b5195711bf4a22ad8c2add5bf1962d6a6cb18b751abbe73711699bce59199bd09ad2a63
-
SSDEEP
12288:kx/qRSt2dKOvWmr8VI7FitZ+TaioANCif4hdMkuvMNptn0UxqJFTP5ijOE0FPgOe:kxyvKOvLr8K7FiCTaiS1vaqqFM
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-