General
-
Target
98eadd52d99bd13ac19f33bbb3e870c2_JaffaCakes118
-
Size
648KB
-
Sample
240605-w6nnfafb96
-
MD5
98eadd52d99bd13ac19f33bbb3e870c2
-
SHA1
0cd4bb86b7de2c7a3b0bcd8cf4281bbd0c4d6bb6
-
SHA256
e76979c82e8b0da7e11945e1f42f0ee41d14c5150f6bafc46fdf0b5c6db9ffd5
-
SHA512
6e22b8c0baf8ccedf1f237c99f75c5fa5170648b9778f282c75eb9cfd1859025d9d138af58f3415f4fe25cca63f61457eb0c72e8ebd95cc045073ce69b4f7a6c
-
SSDEEP
6144:Q5mTEwUok+1NjIjODnupJnMZLrSPm4JZM1o7SVMVVadETPjSjCv4RgSNY5v6:Q5wEw3kEDnQdM9rEju0TH4l
Static task
static1
Behavioral task
behavioral1
Sample
98eadd52d99bd13ac19f33bbb3e870c2_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Extracted
gozi
-
build
214062
Extracted
gozi
3189
hfmjerrodo.com
w19jackyivah.com
l15uniquekylie.city
-
build
214062
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
98eadd52d99bd13ac19f33bbb3e870c2_JaffaCakes118
-
Size
648KB
-
MD5
98eadd52d99bd13ac19f33bbb3e870c2
-
SHA1
0cd4bb86b7de2c7a3b0bcd8cf4281bbd0c4d6bb6
-
SHA256
e76979c82e8b0da7e11945e1f42f0ee41d14c5150f6bafc46fdf0b5c6db9ffd5
-
SHA512
6e22b8c0baf8ccedf1f237c99f75c5fa5170648b9778f282c75eb9cfd1859025d9d138af58f3415f4fe25cca63f61457eb0c72e8ebd95cc045073ce69b4f7a6c
-
SSDEEP
6144:Q5mTEwUok+1NjIjODnupJnMZLrSPm4JZM1o7SVMVVadETPjSjCv4RgSNY5v6:Q5wEw3kEDnQdM9rEju0TH4l
-