Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
31-05-2024 00:08
General
-
Target
8561eac2850cc072e07356694361bedf_JaffaCakes118.exe
-
Size
118KB
-
MD5
8561eac2850cc072e07356694361bedf
-
SHA1
e6e304db4a098105e255667090e4025ee651b56f
-
SHA256
34ec5a6fb4dbe2846307b9ae1774bc0795750c6a24a51d22d1fd8c3b167aa3c6
-
SHA512
795ca9e8c10657ff30bd78a33cc1adebbb9fcf01f6512369b3370297549356f23f2430d08fa3f3b9bb1ee6db99bd592b03f1c0133f7d82c5d7ac09bf419f533d
-
SSDEEP
3072:RxuoxCAim7ocx3+BwOfd5sZLisoMQt/dj3QkReyjyGjBtG:RxOm7ocQBws5GisoMQNdDLReyjyaB4
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi
Gozi is a well-known and widely distributed banking trojan.
Processes
-
C:\Users\Admin\AppData\Local\Temp\8561eac2850cc072e07356694361bedf_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\8561eac2850cc072e07356694361bedf_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
92KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB
-
Filesize
136KB