Overview

overview

10

Static

static

10

jaffacakes...up.exe

windows10-2004-x64

10

jaffacakes...up.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_Trojan-Spy.Win32.Noon.nup.2db6b84287c463467260ae2966182c69
  • Size 648KB
  • Sample261012-lsbfvabc62
  • SHA256 ba8ee5a8557b509e2a07a97c836fd1194830341f80ec7469b91cf95881aaa0e4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
formbookguloaderemdiscoverydownloaderratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 3.8

Campaign

  • em

Decoy

  • americarodz.com

  • blancdeguix.net

  • veni.ltd

  • nbiot.ink

  • technicalzee.com

  • strangerpeoples.info

  • piacenzaoggi.com

  • alpha-romance.com

  • sistersandaughters.com

  • equilibrioterapias.com

  • 41230858.net

  • powerhourplaylist.com

  • tear-studio.com

  • l90oukb8psg.biz

  • ddhproperties.com

  • horsefamilys.com

  • directtoysandmodels.com

  • ozffaf.accountant

  • unes8.com

  • magnus-material.net

Targets

    • Target
      jaffacakes118_Trojan-Spy.Win32.Noon.nup.2db6b84287c463467260ae2966182c69
    • Size 648KB
    • SHA256 ba8ee5a8557b509e2a07a97c836fd1194830341f80ec7469b91cf95881aaa0e4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    emdiscoveryformbookratspywarestealertrojan

    • Family: Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks