Overview

overview

10

Static

static

10

jaffacakes...wx.exe

windows10-2004-x64

10

jaffacakes...wx.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_Trojan-Spy.Win32.Noon.swx.7313c8502abc28fa495696eb5beda468
  • Size 516KB
  • Sample261012-lw3dqsbd34
  • SHA256 d34b65f8ac3b101a6d835e9b669cbb065560d8bb12ff677bababe36adb674102
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
formbookguloaderebdiscoverydownloaderratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 3.9

Campaign

  • eb

Decoy

  • mainstreamhosting.biz

  • warp-speed.email

  • valkyrieuav.com

  • darlingweekends.com

  • beyazs.com

  • kreasidesain.com

  • trod.ltd

  • njbarberbattle.com

  • mono.guru

  • danacoquangnam.com

  • acuaspring.store

  • quiclkiestores.com

  • indycdandvinyl.net

  • innovation-quest.info

  • myyoutubevidz.com

  • findmysuperhero.com

  • clipvuicuoi.com

  • hemerasexperience.com

  • meganoti.com

  • hoezpa.men

Targets

    • Target
      jaffacakes118_Trojan-Spy.Win32.Noon.swx.7313c8502abc28fa495696eb5beda468
    • Size 516KB
    • SHA256 d34b65f8ac3b101a6d835e9b669cbb065560d8bb12ff677bababe36adb674102
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    ebdiscoveryformbookratspywarestealertrojan

    • Family: Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks