General
-
Target
b1f80689e29216269aeaf3d730cd88d6_JaffaCakes118
-
Size
215KB
-
Sample
240616-ge7jxa1grg
-
MD5
b1f80689e29216269aeaf3d730cd88d6
-
SHA1
ad7bcde5e199663ec9d91707a7214c586093eb12
-
SHA256
40067f80c4e163d3e2790f92c37435932745b03ebbc9536d8b727dd1ae9027ac
-
SHA512
ee208295cebac0f4ae20ac556b3a249fe96472a6f0d0787d2451503f4e518550c7824612f2e14d162c6b07c1c465c5bfbf52ce16cca5dc3c0d7c9c6ad3322466
-
SSDEEP
3072:Rb9pXDyUKdySqVgQZt8OdcjFfSvbke/0t4mwqWB55syoNdL0I2L6BWnqR+yV:BHXDy1qVvZnOe/HEyobWGd
Static task
static1
Behavioral task
behavioral1
Sample
b1f80689e29216269aeaf3d730cd88d6_JaffaCakes118.exe
Resource
win7-20240220-en
Malware Config
Extracted
gozi
-
build
215165
Extracted
gozi
3153
biesbetiop.com
kircherche.com
toforemedi.com
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
b1f80689e29216269aeaf3d730cd88d6_JaffaCakes118
-
Size
215KB
-
MD5
b1f80689e29216269aeaf3d730cd88d6
-
SHA1
ad7bcde5e199663ec9d91707a7214c586093eb12
-
SHA256
40067f80c4e163d3e2790f92c37435932745b03ebbc9536d8b727dd1ae9027ac
-
SHA512
ee208295cebac0f4ae20ac556b3a249fe96472a6f0d0787d2451503f4e518550c7824612f2e14d162c6b07c1c465c5bfbf52ce16cca5dc3c0d7c9c6ad3322466
-
SSDEEP
3072:Rb9pXDyUKdySqVgQZt8OdcjFfSvbke/0t4mwqWB55syoNdL0I2L6BWnqR+yV:BHXDy1qVvZnOe/HEyobWGd
-