General
-
Target
3f6923980a975f19415c9cc653eb38a6_JaffaCakes118
-
Size
215KB
-
Sample
240513-n9k3qadg7s
-
MD5
3f6923980a975f19415c9cc653eb38a6
-
SHA1
d013ae346d2e991c28b9f90bbb4a7bdcb34e4640
-
SHA256
e4b6725684d724eb207a7471d7c35b1dbbf9ff754860c6473a7e6b7884c38efd
-
SHA512
ab8251c5e5824fe153bf8511e47f54f8016d520ed7c5408b8b2b010fa2d8321dfbbb110804ff2b6b14d60dafd061b1db08f6c71541b32c58b6eda9e4c261577a
-
SSDEEP
3072:Rb9pXDyUKdySqVgQZt8OdcjFfSvbke/0t4mwqWB55syoNdL0U2L6BWnqR+yV:BHXDy1qVvZnOe/HEyo/WGd
Static task
static1
Behavioral task
behavioral1
Sample
3f6923980a975f19415c9cc653eb38a6_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
gozi
-
build
215165
Extracted
gozi
3153
biesbetiop.com
kircherche.com
toforemedi.com
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
3f6923980a975f19415c9cc653eb38a6_JaffaCakes118
-
Size
215KB
-
MD5
3f6923980a975f19415c9cc653eb38a6
-
SHA1
d013ae346d2e991c28b9f90bbb4a7bdcb34e4640
-
SHA256
e4b6725684d724eb207a7471d7c35b1dbbf9ff754860c6473a7e6b7884c38efd
-
SHA512
ab8251c5e5824fe153bf8511e47f54f8016d520ed7c5408b8b2b010fa2d8321dfbbb110804ff2b6b14d60dafd061b1db08f6c71541b32c58b6eda9e4c261577a
-
SSDEEP
3072:Rb9pXDyUKdySqVgQZt8OdcjFfSvbke/0t4mwqWB55syoNdL0U2L6BWnqR+yV:BHXDy1qVvZnOe/HEyo/WGd
-