General
-
Target
6de813a22b2b73e330085ec7c85e041b_JaffaCakes118
-
Size
395KB
-
Sample
240725-dpvfjsybmb
-
MD5
6de813a22b2b73e330085ec7c85e041b
-
SHA1
2482482f64d49bd1fcf7f995291d1c22824c2e92
-
SHA256
067fca1211ab7cde65e58c057b3b8cbaf9aa6da891b7f3e9bd91b191eab649a0
-
SHA512
65c23c009f5926017f42ced2af528633af64f8274fb9f43103d61617d6de8d9a11fd00143813a43800af1a75d66d1b3a387fd6d5de88e4be3d0f6e51a52fa70b
-
SSDEEP
6144:yz3q2jSSIOrGPtU1PeMaMHMj1mnlKI1vW9plO4:+62joOr0slHymllWVO
Behavioral task
behavioral1
Sample
6de813a22b2b73e330085ec7c85e041b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6de813a22b2b73e330085ec7c85e041b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
gozi
Targets
-
-
Target
6de813a22b2b73e330085ec7c85e041b_JaffaCakes118
-
Size
395KB
-
MD5
6de813a22b2b73e330085ec7c85e041b
-
SHA1
2482482f64d49bd1fcf7f995291d1c22824c2e92
-
SHA256
067fca1211ab7cde65e58c057b3b8cbaf9aa6da891b7f3e9bd91b191eab649a0
-
SHA512
65c23c009f5926017f42ced2af528633af64f8274fb9f43103d61617d6de8d9a11fd00143813a43800af1a75d66d1b3a387fd6d5de88e4be3d0f6e51a52fa70b
-
SSDEEP
6144:yz3q2jSSIOrGPtU1PeMaMHMj1mnlKI1vW9plO4:+62joOr0slHymllWVO
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-