General
-
Target
bd7d98a255c8d799a6ca9d9eb9baf251_JaffaCakes118
-
Size
215KB
-
Sample
240619-vylnfaveqf
-
MD5
bd7d98a255c8d799a6ca9d9eb9baf251
-
SHA1
e72fe38180702c1b433fd80b540e0189658eb294
-
SHA256
cfc65468fa4e9d507b5ba7e84f6cf367bcec54aa528b65aa0cfb38e342a34816
-
SHA512
47ecb7ce2e0fcf6e936ba36ffe7addec5270ea353860bf7073907853ada7e6685e1e2183767a3d4c2825db6f9d8acca1995ef45b717eb9de495d544b2be6d719
-
SSDEEP
3072:Rb9pXDyUKdySqVgQZt8OdcjFfSvbke/0t4mwqWB55syoNdL0l2L6BWnqR+yV:BHXDy1qVvZnOe/HEyowWGd
Static task
static1
Behavioral task
behavioral1
Sample
bd7d98a255c8d799a6ca9d9eb9baf251_JaffaCakes118.exe
Resource
win7-20240611-en
Malware Config
Extracted
gozi
-
build
215165
Extracted
gozi
3153
biesbetiop.com
kircherche.com
toforemedi.com
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
bd7d98a255c8d799a6ca9d9eb9baf251_JaffaCakes118
-
Size
215KB
-
MD5
bd7d98a255c8d799a6ca9d9eb9baf251
-
SHA1
e72fe38180702c1b433fd80b540e0189658eb294
-
SHA256
cfc65468fa4e9d507b5ba7e84f6cf367bcec54aa528b65aa0cfb38e342a34816
-
SHA512
47ecb7ce2e0fcf6e936ba36ffe7addec5270ea353860bf7073907853ada7e6685e1e2183767a3d4c2825db6f9d8acca1995ef45b717eb9de495d544b2be6d719
-
SSDEEP
3072:Rb9pXDyUKdySqVgQZt8OdcjFfSvbke/0t4mwqWB55syoNdL0l2L6BWnqR+yV:BHXDy1qVvZnOe/HEyowWGd
-