General
-
Target
394db6671c873c52077cf02c03b54d9b_JaffaCakes118
-
Size
232KB
-
Sample
240512-kym66aha9y
-
MD5
394db6671c873c52077cf02c03b54d9b
-
SHA1
357e365b9bff9d63a09eaaba985786945f4f73ba
-
SHA256
fd3b49d540e57c472307133465ac0eecaed9fca8b8ad4c421d049234e43fab5a
-
SHA512
f6b51b2dafd275a15bb6952a5c38a89524321bdc1997b56cd8551279bf137ddda2741f74ac4f9914e69503dff237ab9ee8da73cceaecb300c224b5693e3036e4
-
SSDEEP
3072:781Z1WL9+IhEzC+ll/KwV116aF/29vSk86kCYyKdKRTI+Tq+kaQ6gdr4icLEOfUN:Qc9+IuzC+lT6aF/298/YIWqFr3O7U
Static task
static1
Behavioral task
behavioral1
Sample
394db6671c873c52077cf02c03b54d9b_JaffaCakes118.exe
Resource
win7-20240419-en
Malware Config
Extracted
gozi
-
build
214107
Extracted
gozi
3540
settings-win.data.microsoft.com
jyomacktom.top
nxbpierrecjf.com
spt71igina.com
-
build
214107
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
394db6671c873c52077cf02c03b54d9b_JaffaCakes118
-
Size
232KB
-
MD5
394db6671c873c52077cf02c03b54d9b
-
SHA1
357e365b9bff9d63a09eaaba985786945f4f73ba
-
SHA256
fd3b49d540e57c472307133465ac0eecaed9fca8b8ad4c421d049234e43fab5a
-
SHA512
f6b51b2dafd275a15bb6952a5c38a89524321bdc1997b56cd8551279bf137ddda2741f74ac4f9914e69503dff237ab9ee8da73cceaecb300c224b5693e3036e4
-
SSDEEP
3072:781Z1WL9+IhEzC+ll/KwV116aF/29vSk86kCYyKdKRTI+Tq+kaQ6gdr4icLEOfUN:Qc9+IuzC+lT6aF/298/YIWqFr3O7U
-