General
-
Target
75c8aa03275d1e67fc7ce9c20385c123_JaffaCakes118
-
Size
1.8MB
-
Sample
240526-rssysaac46
-
MD5
75c8aa03275d1e67fc7ce9c20385c123
-
SHA1
67a7b25a7792aed6036acb7996843414e2b9e227
-
SHA256
ffc94a044cf375139e6841a0c68fe004c837d172eaa07612850120b5e79751dc
-
SHA512
5b82361aeef4ce9cb5c51d1d0aab4ffb6e2db72aefa21329f4d14cc6f43a594859ecbbb321f1fd737e6143a5d90e863a1c6b25750ac5c217ba1104ff5126976a
-
SSDEEP
49152:4SuE3qtrqPKIO23Hlin6COYolnyJ2WR6wOHste0uIlCj790Lhf4xC0FyQ4L6nd:3L3OqPKIOson6Cslny8WR6wOHstehsC7
Static task
static1
Behavioral task
behavioral1
Sample
75c8aa03275d1e67fc7ce9c20385c123_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Extracted
gozi
-
build
214062
Extracted
gozi
3184
qfelicialew.city
mzg4958lc.com
gxuxwnszau.band
-
build
214062
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
75c8aa03275d1e67fc7ce9c20385c123_JaffaCakes118
-
Size
1.8MB
-
MD5
75c8aa03275d1e67fc7ce9c20385c123
-
SHA1
67a7b25a7792aed6036acb7996843414e2b9e227
-
SHA256
ffc94a044cf375139e6841a0c68fe004c837d172eaa07612850120b5e79751dc
-
SHA512
5b82361aeef4ce9cb5c51d1d0aab4ffb6e2db72aefa21329f4d14cc6f43a594859ecbbb321f1fd737e6143a5d90e863a1c6b25750ac5c217ba1104ff5126976a
-
SSDEEP
49152:4SuE3qtrqPKIO23Hlin6COYolnyJ2WR6wOHste0uIlCj790Lhf4xC0FyQ4L6nd:3L3OqPKIOson6Cslny8WR6wOHstehsC7
-