General
-
Target
7525a0139f7b28d74affe5c9b112ccde_JaffaCakes118
-
Size
155KB
-
Sample
240526-l868fseg2y
-
MD5
7525a0139f7b28d74affe5c9b112ccde
-
SHA1
91a9b33517531ae03b3b05e44c721508890026a4
-
SHA256
1bcc72682dc5b2652f2ca16cedfbb5b693c2e3b2443718e59f9dad4f7d566e29
-
SHA512
7fb22d168712689d175ff64ad6c955dd5d36dbac1203f5f0fade793e604cee88154a29f322e1d2d3254303b48fef7971845f4f8a4e9750d2a681f113ab475837
-
SSDEEP
3072:4Wuk6BU7sniep/j4UswJiNsRI4EwR3WxUIuupo/KuXkwIEnUaTii5Qi37Gq:4WI2wiep/j/2sRI4E4Wx56hIlaMi37X
Static task
static1
Behavioral task
behavioral1
Sample
7525a0139f7b28d74affe5c9b112ccde_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
gozi
-
build
214098
Extracted
gozi
3492
google.com
gmail.com
lsammietf53.com
p28u70webster.com
ploi7260m71.com
-
build
214098
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
7525a0139f7b28d74affe5c9b112ccde_JaffaCakes118
-
Size
155KB
-
MD5
7525a0139f7b28d74affe5c9b112ccde
-
SHA1
91a9b33517531ae03b3b05e44c721508890026a4
-
SHA256
1bcc72682dc5b2652f2ca16cedfbb5b693c2e3b2443718e59f9dad4f7d566e29
-
SHA512
7fb22d168712689d175ff64ad6c955dd5d36dbac1203f5f0fade793e604cee88154a29f322e1d2d3254303b48fef7971845f4f8a4e9750d2a681f113ab475837
-
SSDEEP
3072:4Wuk6BU7sniep/j4UswJiNsRI4EwR3WxUIuupo/KuXkwIEnUaTii5Qi37Gq:4WI2wiep/j/2sRI4E4Wx56hIlaMi37X
-