General
-
Target
01b47c599033cc101df4762ea2c092f1_JaffaCakes118
-
Size
203KB
-
Sample
240426-1cewnacf24
-
MD5
01b47c599033cc101df4762ea2c092f1
-
SHA1
e488b358fa2137ef6acfe7676bca9ac292eefd3d
-
SHA256
0fdbe7bcafa2968e63429361502bd3a78fb4efe8d7e40421990b025aadd42f3a
-
SHA512
f5bccc2fd4b61b13dfc06803ebd8ddbee9e9359e99fccce9cb44b4774851f65127d9717180ac9d7fe366d635f82c39eaf447579150dec740d7991610591befbf
-
SSDEEP
3072:9gji2dQ6v4uPXDNUj4jKBonzmLXlYVRLh0epEEZqkFBc4+uTqN76o:96dp4uPZzGonqXGXh0bluBc4GZ5
Static task
static1
Behavioral task
behavioral1
Sample
01b47c599033cc101df4762ea2c092f1_JaffaCakes118.exe
Resource
win7-20240220-en
Malware Config
Extracted
gozi
-
build
215165
Extracted
gozi
3162
menehleibe.com
liemuteste.com
thulligend.com
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
01b47c599033cc101df4762ea2c092f1_JaffaCakes118
-
Size
203KB
-
MD5
01b47c599033cc101df4762ea2c092f1
-
SHA1
e488b358fa2137ef6acfe7676bca9ac292eefd3d
-
SHA256
0fdbe7bcafa2968e63429361502bd3a78fb4efe8d7e40421990b025aadd42f3a
-
SHA512
f5bccc2fd4b61b13dfc06803ebd8ddbee9e9359e99fccce9cb44b4774851f65127d9717180ac9d7fe366d635f82c39eaf447579150dec740d7991610591befbf
-
SSDEEP
3072:9gji2dQ6v4uPXDNUj4jKBonzmLXlYVRLh0epEEZqkFBc4+uTqN76o:96dp4uPZzGonqXGXh0bluBc4GZ5
-