General
-
Target
98cef302f88b5dbda277dcdf62c2f339_JaffaCakes118
-
Size
197KB
-
Sample
240605-warp8aeb95
-
MD5
98cef302f88b5dbda277dcdf62c2f339
-
SHA1
afd951d96d119ca08deda20c8ef3b8d499ace571
-
SHA256
371b9a28b32203dbd2cac7e893b853faffc9f05f83404a8fbf6e34e9cb9d6266
-
SHA512
79a415dce22410faf611ff87a976ffd2b64c0df0971e6d3664f6f8c780bd95c8baeeebeeb278232c51cb818e96c4b1a03ff84531dd7b6fa6839a5bb41c23d398
-
SSDEEP
3072:XWDdCZn+MHTptyZ1+5Ck15lxYY54Fp3QT2kZz2yDj0EQ8x7xSJM7UmA0ox6:XWkdVlS1oCPY5+QT2kx5HlS27Umg
Static task
static1
Behavioral task
behavioral1
Sample
98cef302f88b5dbda277dcdf62c2f339_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
gozi
-
build
215165
Extracted
gozi
3135
zweideckei.com
ziebelschr.com
endetztera.com
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
98cef302f88b5dbda277dcdf62c2f339_JaffaCakes118
-
Size
197KB
-
MD5
98cef302f88b5dbda277dcdf62c2f339
-
SHA1
afd951d96d119ca08deda20c8ef3b8d499ace571
-
SHA256
371b9a28b32203dbd2cac7e893b853faffc9f05f83404a8fbf6e34e9cb9d6266
-
SHA512
79a415dce22410faf611ff87a976ffd2b64c0df0971e6d3664f6f8c780bd95c8baeeebeeb278232c51cb818e96c4b1a03ff84531dd7b6fa6839a5bb41c23d398
-
SSDEEP
3072:XWDdCZn+MHTptyZ1+5Ck15lxYY54Fp3QT2kZz2yDj0EQ8x7xSJM7UmA0ox6:XWkdVlS1oCPY5+QT2kx5HlS27Umg
-