Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_afe238e76e6f9a5bdaddc4eafa099c1c
-
Size
569KB
-
Sample
250108-2agsxayldk
-
MD5
afe238e76e6f9a5bdaddc4eafa099c1c
-
SHA1
827f80895a6c346d218343ea87cb581e459eaba2
-
SHA256
5a6aabdbf67cc4ca0262f3d82a098d57c01e1c335e47597982420719f5c8ee1b
-
SHA512
7e9e212f86cc3d696da293466a35be8614ea2715eceb58a6d4aa60f0ce1a9c2a6b5e2f043284e6a91fd3476adfcbe259c613e0aff31ee8eb10d942a72deed764
-
SSDEEP
12288:46J/ZsDPDXWsjZ4s2JQUCM2SuGNmYSTeq:46pZs7DmsispUCM9V9Ce
Malware Config
Extracted
formbook
4.1
d7ln
bulut-imza.com
gotastebuds.com
shutupmags.com
clocksport.com
toweryachtcounsel.com
kingcopier.com
pluspersona.com
inchallahe.com
unclonedconsulting.com
ccdt168.com
tonyzheng.xyz
voiceoftheepeople.com
cicapital.xyz
offxpro.com
loyatiproductions.com
makemebuystuff.com
incuba8labs.com
remparka.com
newstft.com
bgame.pro
Targets
-
-
Target
JaffaCakes118_afe238e76e6f9a5bdaddc4eafa099c1c
-
Size
569KB
-
MD5
afe238e76e6f9a5bdaddc4eafa099c1c
-
SHA1
827f80895a6c346d218343ea87cb581e459eaba2
-
SHA256
5a6aabdbf67cc4ca0262f3d82a098d57c01e1c335e47597982420719f5c8ee1b
-
SHA512
7e9e212f86cc3d696da293466a35be8614ea2715eceb58a6d4aa60f0ce1a9c2a6b5e2f043284e6a91fd3476adfcbe259c613e0aff31ee8eb10d942a72deed764
-
SSDEEP
12288:46J/ZsDPDXWsjZ4s2JQUCM2SuGNmYSTeq:46pZs7DmsispUCM9V9Ce
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext
-