General
-
Target
b69e6e54bfcc2536be519d9cdc691b03_JaffaCakes118
-
Size
1.1MB
-
Sample
240617-ee1egssgra
-
MD5
b69e6e54bfcc2536be519d9cdc691b03
-
SHA1
3797a5718c3e7a123eb9005e8e137229b5eadb67
-
SHA256
deccbaea4951de166f83748b3ed4bd5d06b49bfe53f7106694f15c7c3102f548
-
SHA512
3cdc68e0fccdc168b70d3a380b8706bfe2362299a045bf70ae34c87f77578c503ef02ecb53895d363e2ee1dfdfc4f2645f54b7193c83374d2a77c241f03f5e77
-
SSDEEP
24576:+u6J33O0c+JY5UZ+XC0kGso6FaAr5eee7o2iE7zQqWY:Qu0c++OCvkGs9FaA1AvzoY
Malware Config
Extracted
formbook
3.9
re
shumayuansu.com
falkerthaus.com
blondiefitness.com
lappair.reisen
miamiwindowtintingshop.com
vickeryhomesforsale.com
ohparisisburning.com
tipbong88.com
foxfarmroad.design
love-yournaturalhair.com
chanvuong.net
raw-materials-efficiency.com
negenomics.com
t0sinfe3fq.com
theconcussioninjury.com
paypalhelpservice.com
bensonsaddler.com
impcashmere.com
finddentalimplantsite.live
dianlonglawfirm.com
Targets
-
-
Target
b69e6e54bfcc2536be519d9cdc691b03_JaffaCakes118
-
Size
1.1MB
-
MD5
b69e6e54bfcc2536be519d9cdc691b03
-
SHA1
3797a5718c3e7a123eb9005e8e137229b5eadb67
-
SHA256
deccbaea4951de166f83748b3ed4bd5d06b49bfe53f7106694f15c7c3102f548
-
SHA512
3cdc68e0fccdc168b70d3a380b8706bfe2362299a045bf70ae34c87f77578c503ef02ecb53895d363e2ee1dfdfc4f2645f54b7193c83374d2a77c241f03f5e77
-
SSDEEP
24576:+u6J33O0c+JY5UZ+XC0kGso6FaAr5eee7o2iE7zQqWY:Qu0c++OCvkGs9FaA1AvzoY
Score10/10-
Formbook
Formbook is a data stealing malware which is capable of stealing data.
-
Formbook payload
-
Suspicious use of SetThreadContext
-