General
-
Target
4465eec3e8d2d4387543186492747a37_JaffaCakes118
-
Size
648KB
-
Sample
240515-d7lalafe2s
-
MD5
4465eec3e8d2d4387543186492747a37
-
SHA1
9bab2e65fc53b0e925ce2c3d315b59b6b85b1ab6
-
SHA256
4cbb3db8a5d43ec5a34238133da2017d288f485f4a6e5affb94bf2aa74af5e4a
-
SHA512
fc5facaa2d0de53a10fa23fc6b42c0134a0b65c6840f828a4588ff49e8c158c458e7f04af89c8affa326702975c4bdcc5e9318e1f6d0a6a4136be496959258ce
-
SSDEEP
6144:Q5mTE6Uok+1NjIjODnupJnMZLrSPm4JZM1o7SVMVVadETPjSjCv4RgSNY5v6:Q5wE63kEDnQdM9rEju0TH4l
Static task
static1
Behavioral task
behavioral1
Sample
4465eec3e8d2d4387543186492747a37_JaffaCakes118.exe
Resource
win7-20240215-en
Malware Config
Extracted
gozi
-
build
214062
Extracted
gozi
3189
hfmjerrodo.com
w19jackyivah.com
l15uniquekylie.city
-
build
214062
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
4465eec3e8d2d4387543186492747a37_JaffaCakes118
-
Size
648KB
-
MD5
4465eec3e8d2d4387543186492747a37
-
SHA1
9bab2e65fc53b0e925ce2c3d315b59b6b85b1ab6
-
SHA256
4cbb3db8a5d43ec5a34238133da2017d288f485f4a6e5affb94bf2aa74af5e4a
-
SHA512
fc5facaa2d0de53a10fa23fc6b42c0134a0b65c6840f828a4588ff49e8c158c458e7f04af89c8affa326702975c4bdcc5e9318e1f6d0a6a4136be496959258ce
-
SSDEEP
6144:Q5mTE6Uok+1NjIjODnupJnMZLrSPm4JZM1o7SVMVVadETPjSjCv4RgSNY5v6:Q5wE63kEDnQdM9rEju0TH4l
-