General
-
Target
420d2cdc1cdac0515cead0e8e06e4386_JaffaCakes118
-
Size
485KB
-
Sample
240514-s9kt6sde72
-
MD5
420d2cdc1cdac0515cead0e8e06e4386
-
SHA1
d221d6ae9b4c9ef8be303450dcdd4e7e68272662
-
SHA256
e6963bbae30a58dd4ea2712fec0b044b826bd3c76bd773ae9b90be49cdbb4e17
-
SHA512
bb647d9283a8353c4e4055bf8a5df4eac62909a815958715ed80a355c1752b1e8b24e93293079ed4875719e72500451a4137e3e69c4ec1b71ae4a37a34d19dae
-
SSDEEP
12288:mD9UDevpMtdoe83GWLh6iVMGPItYLwqYZy4e:hiq/H8hh6O9ItqHYZS
Static task
static1
Behavioral task
behavioral1
Sample
420d2cdc1cdac0515cead0e8e06e4386_JaffaCakes118.exe
Resource
win7-20240215-en
Malware Config
Extracted
gozi
-
build
215165
Extracted
gozi
3140
isatawatag.com
bosototsuy.com
atamekihok.com
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
420d2cdc1cdac0515cead0e8e06e4386_JaffaCakes118
-
Size
485KB
-
MD5
420d2cdc1cdac0515cead0e8e06e4386
-
SHA1
d221d6ae9b4c9ef8be303450dcdd4e7e68272662
-
SHA256
e6963bbae30a58dd4ea2712fec0b044b826bd3c76bd773ae9b90be49cdbb4e17
-
SHA512
bb647d9283a8353c4e4055bf8a5df4eac62909a815958715ed80a355c1752b1e8b24e93293079ed4875719e72500451a4137e3e69c4ec1b71ae4a37a34d19dae
-
SSDEEP
12288:mD9UDevpMtdoe83GWLh6iVMGPItYLwqYZy4e:hiq/H8hh6O9ItqHYZS
-