General
-
Target
856ae68eba7a1eeed2fd32f46a1727a3_JaffaCakes118
-
Size
203KB
-
Sample
240531-anlkgafg8s
-
MD5
856ae68eba7a1eeed2fd32f46a1727a3
-
SHA1
aa4f48c21c3b2ace94c89ebdba0023796bec7368
-
SHA256
b74c435944f5820de51e5bb43828b186f54e956144ca5bc41f6685652b8cb16b
-
SHA512
7429052dd0a4b7119afaa1d8f2402edba790bc8fa452b00f6d931ec5492c4bac65c80422f3bd07cc12414fa177486342c2026fedbe3089a49c735456cf7b51fe
-
SSDEEP
3072:9Bji2dQ6v4uPXDNUj4jKBonzmLXlYVRLh0epEEZqkFBc4+uTqN76o:91dp4uPZzGonqXGXh0bluBc4GZ5
Static task
static1
Behavioral task
behavioral1
Sample
856ae68eba7a1eeed2fd32f46a1727a3_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
gozi
-
build
215165
Extracted
gozi
3162
menehleibe.com
liemuteste.com
thulligend.com
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
856ae68eba7a1eeed2fd32f46a1727a3_JaffaCakes118
-
Size
203KB
-
MD5
856ae68eba7a1eeed2fd32f46a1727a3
-
SHA1
aa4f48c21c3b2ace94c89ebdba0023796bec7368
-
SHA256
b74c435944f5820de51e5bb43828b186f54e956144ca5bc41f6685652b8cb16b
-
SHA512
7429052dd0a4b7119afaa1d8f2402edba790bc8fa452b00f6d931ec5492c4bac65c80422f3bd07cc12414fa177486342c2026fedbe3089a49c735456cf7b51fe
-
SSDEEP
3072:9Bji2dQ6v4uPXDNUj4jKBonzmLXlYVRLh0epEEZqkFBc4+uTqN76o:91dp4uPZzGonqXGXh0bluBc4GZ5
-