General
-
Target
675040acdb2972a580c6736c26ddc274_JaffaCakes118
-
Size
203KB
-
Sample
240522-p2npbaca6v
-
MD5
675040acdb2972a580c6736c26ddc274
-
SHA1
a126c522a39dd2afaccce1611458eb84f907d414
-
SHA256
94278e7334690c0f0643ee44e6a5df982b1aa0b9ae978368ca4f7ca10bd34cca
-
SHA512
688a6ca451b59e9fc39b4a5e8078c48bcfcc722d4e15fc74c65362a0b619a6cc965a3d2b4cb9f3363bf16d28c59922fbcd0578f91f561fae4d915872294f3a2e
-
SSDEEP
3072:QQVgfobnzn+3oH5+DwHBurCrMXcJ7j2xEV+zuxougrmiUfe6wUUYYUYUYUYUYUYG:RiMfH5+DwErCrPZUEj2uglse6z
Static task
static1
Behavioral task
behavioral1
Sample
675040acdb2972a580c6736c26ddc274_JaffaCakes118.exe
Resource
win7-20240220-en
Malware Config
Extracted
gozi
-
build
214062
Extracted
gozi
3172
tmoshedelores.email
glgjed.fun
cjessbzpatsy.com
-
build
214062
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
675040acdb2972a580c6736c26ddc274_JaffaCakes118
-
Size
203KB
-
MD5
675040acdb2972a580c6736c26ddc274
-
SHA1
a126c522a39dd2afaccce1611458eb84f907d414
-
SHA256
94278e7334690c0f0643ee44e6a5df982b1aa0b9ae978368ca4f7ca10bd34cca
-
SHA512
688a6ca451b59e9fc39b4a5e8078c48bcfcc722d4e15fc74c65362a0b619a6cc965a3d2b4cb9f3363bf16d28c59922fbcd0578f91f561fae4d915872294f3a2e
-
SSDEEP
3072:QQVgfobnzn+3oH5+DwHBurCrMXcJ7j2xEV+zuxougrmiUfe6wUUYYUYUYUYUYUYG:RiMfH5+DwErCrPZUEj2uglse6z
-