General
-
Target
b13bed0e5625a15c232e8bc6750f0b0a_JaffaCakes118
-
Size
485KB
-
Sample
240616-cfyaeayepp
-
MD5
b13bed0e5625a15c232e8bc6750f0b0a
-
SHA1
c06008201df17c2272e81995ae07733125f327dc
-
SHA256
8d9b5736ece1378be65d053c5812f307ce76e99859e4d1ebaad45b3f4ee37f47
-
SHA512
67a2dc4cd14971aa653c154b819e2c8d5f92473a42af6545ba9c45846e0f766a10f2ece1176aba5102c345d9ab18b12d3dbc1b24287d50e5d82f0a791bcbabeb
-
SSDEEP
12288:mD9UDevpMtdoe83GWLh6iVMGPatYLwqYZy4e:hiq/H8hh6O9atqHYZS
Static task
static1
Behavioral task
behavioral1
Sample
b13bed0e5625a15c232e8bc6750f0b0a_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
gozi
-
build
215165
Extracted
gozi
3140
isatawatag.com
bosototsuy.com
atamekihok.com
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
b13bed0e5625a15c232e8bc6750f0b0a_JaffaCakes118
-
Size
485KB
-
MD5
b13bed0e5625a15c232e8bc6750f0b0a
-
SHA1
c06008201df17c2272e81995ae07733125f327dc
-
SHA256
8d9b5736ece1378be65d053c5812f307ce76e99859e4d1ebaad45b3f4ee37f47
-
SHA512
67a2dc4cd14971aa653c154b819e2c8d5f92473a42af6545ba9c45846e0f766a10f2ece1176aba5102c345d9ab18b12d3dbc1b24287d50e5d82f0a791bcbabeb
-
SSDEEP
12288:mD9UDevpMtdoe83GWLh6iVMGPatYLwqYZy4e:hiq/H8hh6O9atqHYZS
-