Analysis
-
max time kernel
141s -
max time network
112s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
20-05-2024 15:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5fbd129d02eb3ec77f6e3941067a2aff_JaffaCakes118.exe
Resource
win7-20240220-en
1 signatures
150 seconds
General
-
Target
5fbd129d02eb3ec77f6e3941067a2aff_JaffaCakes118.exe
-
Size
718KB
-
MD5
5fbd129d02eb3ec77f6e3941067a2aff
-
SHA1
83e99306af8738b42f9ddac90aa64c8f43c337df
-
SHA256
328d7fb55999ce919341d6445effa8719fbb710738b04d766a75e8daf20c5048
-
SHA512
805d97f76f755a95cedd4bd4a4b6d3a2c68880e1f65498e097e682240546773fe35fc57a5a05aa7a078166d44f09ab9b8f7a2ed215dc1bc9c43e23da0c2237fb
-
SSDEEP
12288:ZdR9FJlGMifjKs8Kfm99FdUjA2WoG1YBDr7xYLfljnPwTUY2VpwFw:HRpAMiWs8KfOyA2w1Y9cfBPqso
Malware Config
Extracted
Family
gozi
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1624-0-0x0000000000400000-0x00000000004CA000-memory.dmpFilesize
808KB
-
memory/1624-3-0x0000000000400000-0x00000000004CA000-memory.dmpFilesize
808KB
-
memory/1624-2-0x000000000049E000-0x00000000004A1000-memory.dmpFilesize
12KB
-
memory/1624-8-0x0000000000400000-0x00000000004CA000-memory.dmpFilesize
808KB
-
memory/1624-10-0x0000000000400000-0x00000000004CA000-memory.dmpFilesize
808KB