General
-
Target
ac7bc5c4953f3cdf488f98d2bdfe0bf9_JaffaCakes118
-
Size
268KB
-
Sample
240615-b9kezayfjr
-
MD5
ac7bc5c4953f3cdf488f98d2bdfe0bf9
-
SHA1
8dcc3ffa6aed4b42990d63248db3621e2165d9ac
-
SHA256
9ee54571151efbd253a30211dbe7beaf57aca1b1ed8aae48de72f83d43897c3d
-
SHA512
2a25edece0a2ebb8cf8cae2cad742968b09160eaa7a6cbafb3d83a6f62b642efed041f3d9aacf26135125db491032e2385a1139d6c976e362cae3a4fd78c6117
-
SSDEEP
6144:bjGlumlDoFoiADf3N5uYU6REjMmgJpUgiT:bjG8mOF9C/N5uYUdjMmaziT
Static task
static1
Behavioral task
behavioral1
Sample
ac7bc5c4953f3cdf488f98d2bdfe0bf9_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Extracted
gozi
6000
http://velooiisd.club
-
build
214082
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Extracted
gozi
-
build
214082
Targets
-
-
Target
ac7bc5c4953f3cdf488f98d2bdfe0bf9_JaffaCakes118
-
Size
268KB
-
MD5
ac7bc5c4953f3cdf488f98d2bdfe0bf9
-
SHA1
8dcc3ffa6aed4b42990d63248db3621e2165d9ac
-
SHA256
9ee54571151efbd253a30211dbe7beaf57aca1b1ed8aae48de72f83d43897c3d
-
SHA512
2a25edece0a2ebb8cf8cae2cad742968b09160eaa7a6cbafb3d83a6f62b642efed041f3d9aacf26135125db491032e2385a1139d6c976e362cae3a4fd78c6117
-
SSDEEP
6144:bjGlumlDoFoiADf3N5uYU6REjMmgJpUgiT:bjG8mOF9C/N5uYUdjMmaziT
-