General
-
Target
7b9287db9f86baaf97e2392c1492b53c_JaffaCakes118
-
Size
203KB
-
Sample
240528-d8e5zadd6x
-
MD5
7b9287db9f86baaf97e2392c1492b53c
-
SHA1
db01200cc24aed68f51309b3fcb580309882ce71
-
SHA256
54bc90b103157a51959a1a9524bb279d1b41c33d432f772ea71ef5f5548c41aa
-
SHA512
24f6e821fa8c54744c736b10f55e3a1f8ab0e7a89705625aaf9cf9f60981d1fedfaf7d2f81b55c7b9eb5838644a68f62641f504d1ffa330a00346d9e2cde35e1
-
SSDEEP
3072:9xji2dQ6v4uPXDNUj4jKBonzmLXlYVRLh0epEEZqkFBc4+uTqN76o:9ldp4uPZzGonqXGXh0bluBc4GZ5
Static task
static1
Behavioral task
behavioral1
Sample
7b9287db9f86baaf97e2392c1492b53c_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Extracted
gozi
-
build
215165
Extracted
gozi
3162
menehleibe.com
liemuteste.com
thulligend.com
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
7b9287db9f86baaf97e2392c1492b53c_JaffaCakes118
-
Size
203KB
-
MD5
7b9287db9f86baaf97e2392c1492b53c
-
SHA1
db01200cc24aed68f51309b3fcb580309882ce71
-
SHA256
54bc90b103157a51959a1a9524bb279d1b41c33d432f772ea71ef5f5548c41aa
-
SHA512
24f6e821fa8c54744c736b10f55e3a1f8ab0e7a89705625aaf9cf9f60981d1fedfaf7d2f81b55c7b9eb5838644a68f62641f504d1ffa330a00346d9e2cde35e1
-
SSDEEP
3072:9xji2dQ6v4uPXDNUj4jKBonzmLXlYVRLh0epEEZqkFBc4+uTqN76o:9ldp4uPZzGonqXGXh0bluBc4GZ5
-