General
-
Target
0d000748ed275195be493e094435069c_JaffaCakes118
-
Size
203KB
-
Sample
240502-azew3adh74
-
MD5
0d000748ed275195be493e094435069c
-
SHA1
90a77087bae8d2d53ca4c49452e07bbed067d69a
-
SHA256
95c2e799a86e222b4d2b8f83278df0324b6a2ec99ba69ebe13f51b0087e8125a
-
SHA512
a92002239a1405fad253e83c4d80ff46b3063815a930bd3e7765cd47f9547cb81a05055e6ae9b1011c24b9b74976d0d72dbc6f3b2108005ad86d9524fbb54a84
-
SSDEEP
3072:9xji2dQ6v4uPXDNUj4jKBonzmLXlYVRLh0epEEZqkFBc4+uTqN76o:9ldp4uPZzGonqXGXh0bluBc4GZ5
Static task
static1
Behavioral task
behavioral1
Sample
0d000748ed275195be493e094435069c_JaffaCakes118.exe
Resource
win7-20240419-en
Malware Config
Extracted
gozi
-
build
215165
Extracted
gozi
3162
menehleibe.com
liemuteste.com
thulligend.com
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
0d000748ed275195be493e094435069c_JaffaCakes118
-
Size
203KB
-
MD5
0d000748ed275195be493e094435069c
-
SHA1
90a77087bae8d2d53ca4c49452e07bbed067d69a
-
SHA256
95c2e799a86e222b4d2b8f83278df0324b6a2ec99ba69ebe13f51b0087e8125a
-
SHA512
a92002239a1405fad253e83c4d80ff46b3063815a930bd3e7765cd47f9547cb81a05055e6ae9b1011c24b9b74976d0d72dbc6f3b2108005ad86d9524fbb54a84
-
SSDEEP
3072:9xji2dQ6v4uPXDNUj4jKBonzmLXlYVRLh0epEEZqkFBc4+uTqN76o:9ldp4uPZzGonqXGXh0bluBc4GZ5
-