General
-
Target
87af7f7f8536db89db30847bc82627a5_JaffaCakes118
-
Size
376KB
-
Sample
240531-vcvn8afb89
-
MD5
87af7f7f8536db89db30847bc82627a5
-
SHA1
192fdfee96a97e76f763f8c4c99d0cb9dc5ab4e2
-
SHA256
69f65f6ce94deb26bc97f139450830fcbf364203b62c4628c00fa7a1e3901b5e
-
SHA512
14f99ee29c030bfa3956982ec5766410a96e6803bbd3a945959563def06c18d024d02cbf84e2d5b5afa2ddcb1d9e96895ef59417555d85b63c7b3b2e3f8288bf
-
SSDEEP
3072:hkyrSmefi8xQRv00gDg4JQUrQrY17hJHe0KuVuPi6d+YShwaqz+UQc/uGkn3dK:hkal2i8WjgDOY9hhFxTyUOaMkN
Static task
static1
Behavioral task
behavioral1
Sample
87af7f7f8536db89db30847bc82627a5_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Extracted
gozi
3195
nsyblefgg.city
m25lni11528.com
dgrover.band
-
build
214062
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
87af7f7f8536db89db30847bc82627a5_JaffaCakes118
-
Size
376KB
-
MD5
87af7f7f8536db89db30847bc82627a5
-
SHA1
192fdfee96a97e76f763f8c4c99d0cb9dc5ab4e2
-
SHA256
69f65f6ce94deb26bc97f139450830fcbf364203b62c4628c00fa7a1e3901b5e
-
SHA512
14f99ee29c030bfa3956982ec5766410a96e6803bbd3a945959563def06c18d024d02cbf84e2d5b5afa2ddcb1d9e96895ef59417555d85b63c7b3b2e3f8288bf
-
SSDEEP
3072:hkyrSmefi8xQRv00gDg4JQUrQrY17hJHe0KuVuPi6d+YShwaqz+UQc/uGkn3dK:hkal2i8WjgDOY9hhFxTyUOaMkN
-