General
-
Target
903cf677ba834a968b42bd71e4626a9d_JaffaCakes118
-
Size
701KB
-
Sample
240402-swxxksec93
-
MD5
903cf677ba834a968b42bd71e4626a9d
-
SHA1
c751f3ab4612917d15967fc1f0591e674c2e56ca
-
SHA256
b601a3c9c3a3df9043ea82733f1da5b413207d7585ca6b18baa8a4d923ce92d8
-
SHA512
b81d6b419c05ac351d086ab9d439b7cf2d8db21208f85b13e483bacb800a811890ca7fc3ce2295d2861f3323b0d52725e27f42758ef4ec6312018b4a7a249095
-
SSDEEP
12288:1UAQSx16fDEr8Np6b/rPPsjosrS9aEoe+0JCym+4YJAOSVUNcuHIGF4uW/XrGAsF:1z3x16fq8Np6bTPPaBreaZlYCOSVol2S
Static task
static1
Behavioral task
behavioral1
Sample
903cf677ba834a968b42bd71e4626a9d_JaffaCakes118.dll
Resource
win7-20240221-en
Malware Config
Extracted
gozi
Extracted
gozi
8899
msn.com/mail
breuranel.website
outlook.com/signup
areuranel.website
-
base_path
/liopolo/
-
build
260212
-
dga_season
10
-
exe_type
loader
-
extension
.jre
-
server_id
12
Targets
-
-
Target
903cf677ba834a968b42bd71e4626a9d_JaffaCakes118
-
Size
701KB
-
MD5
903cf677ba834a968b42bd71e4626a9d
-
SHA1
c751f3ab4612917d15967fc1f0591e674c2e56ca
-
SHA256
b601a3c9c3a3df9043ea82733f1da5b413207d7585ca6b18baa8a4d923ce92d8
-
SHA512
b81d6b419c05ac351d086ab9d439b7cf2d8db21208f85b13e483bacb800a811890ca7fc3ce2295d2861f3323b0d52725e27f42758ef4ec6312018b4a7a249095
-
SSDEEP
12288:1UAQSx16fDEr8Np6b/rPPsjosrS9aEoe+0JCym+4YJAOSVUNcuHIGF4uW/XrGAsF:1z3x16fq8Np6bTPPaBreaZlYCOSVol2S
-
Blocklisted process makes network request
-