Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
11-05-2024 17:38
General
-
Target
35c391dcb68910224a55b7a3c25f0ea1_JaffaCakes118.exe
-
Size
112KB
-
MD5
35c391dcb68910224a55b7a3c25f0ea1
-
SHA1
7b0076e7504dd4394055f1a306d00c40dcfc2d8a
-
SHA256
1668d9353e0af593bfaa476396fa4d8ff8c22649e6959a30ab5e4f1d3b1babc0
-
SHA512
57397399813e2b6da473bd6dfa699d415981a59f339d74412e4a5c983206097d7f241070be20307e7a02f09b1ea0e1e1c7fa0da52eff1edf81225cfb33443480
-
SSDEEP
1536:esyXwRbvdYGx+RSoDNyX05rlwXAg6DND9y3pKx8l9YyhD0OqMs:esRRbV7x+RSoIX0Mwgu4K49YyhD0OqMs
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi
Gozi is a well-known and widely distributed banking trojan.
Processes
-
C:\Users\Admin\AppData\Local\Temp\35c391dcb68910224a55b7a3c25f0ea1_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\35c391dcb68910224a55b7a3c25f0ea1_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
92KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB