General
-
Target
fd6d8cee5f8feff8f88b55c7836ff67a_JaffaCakes118
-
Size
2.9MB
-
Sample
240420-xracyaga7z
-
MD5
fd6d8cee5f8feff8f88b55c7836ff67a
-
SHA1
97c5b234974242395393780a2ca12199588bc90b
-
SHA256
1be83d46309a1dc163a1038f615a62300fdeb370c2431f6906a3bbf09fea5f74
-
SHA512
35aacb8c31948b624f39e05940d55c01ac39af6a84e0c8caa6a5a7c41d911d9bb42691cdc1a6c11d6e5cc7f856d9c8105d8a7f4814a2c8e556f53850616667cc
-
SSDEEP
49152:6RPBCO6zuVC5L/P+QxYyD6+nN74NH5HUyNRcUsCVOzetdZJ:SPBP6yVC5LeQxln4HBUCczzM3
Behavioral task
behavioral1
Sample
fd6d8cee5f8feff8f88b55c7836ff67a_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
gozi
Targets
-
-
Target
fd6d8cee5f8feff8f88b55c7836ff67a_JaffaCakes118
-
Size
2.9MB
-
MD5
fd6d8cee5f8feff8f88b55c7836ff67a
-
SHA1
97c5b234974242395393780a2ca12199588bc90b
-
SHA256
1be83d46309a1dc163a1038f615a62300fdeb370c2431f6906a3bbf09fea5f74
-
SHA512
35aacb8c31948b624f39e05940d55c01ac39af6a84e0c8caa6a5a7c41d911d9bb42691cdc1a6c11d6e5cc7f856d9c8105d8a7f4814a2c8e556f53850616667cc
-
SSDEEP
49152:6RPBCO6zuVC5L/P+QxYyD6+nN74NH5HUyNRcUsCVOzetdZJ:SPBP6yVC5LeQxln4HBUCczzM3
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-