Overview

overview

10

Static

static

10

jaffacakes...ef.exe

windows10-2004-x64

10

jaffacakes...ef.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_Trojan-Spy.Win32.Noon.wef.b115741c8f46447fdc8665dcb38427db
  • Size 570KB
  • Sample261012-ly9ktsy17p
  • SHA256 7dbd936d23c4b604eba5651b7143ca16678979c858a4f41386b1745d243ee8ea
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
formbookguloaderbadiscoverydownloaderratspywarestealertrojan

Malware Config

Extracted

Family

  • formbook

Version

  • 3.9

Campaign

  • ba

Decoy

  • flane-event.net

  • skyorld.com

  • survivalvideoapp.com

  • schoolofloveawareness.info

  • confusiontime.com

  • sscag.win

  • bayeco-sc.com

  • rockclimbinginamerica.com

  • gzbhy.net

  • tobusinessinc.com

  • 7159553.com

  • lagudownload.site

  • flight.delivery

  • evwheelssource.com

  • securityinfo.review

  • shs925.com

  • vanillaraptor.net

  • pokerclubsoftexas.com

  • bisnisday.com

  • dakarlivemusic.com

Targets

    • Target
      jaffacakes118_Trojan-Spy.Win32.Noon.wef.b115741c8f46447fdc8665dcb38427db
    • Size 570KB
    • SHA256 7dbd936d23c4b604eba5651b7143ca16678979c858a4f41386b1745d243ee8ea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    badiscoveryformbookratspywarestealertrojan

    • Family: Formbook

      Formbook is a data stealing malware which is capable of stealing data.

      trojanspywarestealerformbook

    • Formbook payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks