General

  • Target

    9497748dd75f86706ad5b92235856bc3_JaffaCakes118

  • Size

    1.8MB

  • Sample

    240813-y4q2wsthme

  • MD5

    9497748dd75f86706ad5b92235856bc3

  • SHA1

    8c274f0b095f9533212d0171001d47e71919ddb2

  • SHA256

    497ab5f6e9f93865789889933c976b0265d8789500f6a97c28253342049a8596

  • SHA512

    f4821d7b4628cc20cb629b1d05f511ebaa78f5523d62f5052e9b2149e382341886d52fdb44d887a28f9fda0dd995f84e950e6fd70c91f2f725bbe08e444f76c8

  • SSDEEP

    24576:cxCXLaV+R50CJnXTd2qGi3P3df/dplGT9M4oR2WjKVeVe:2ILa4R6CVXTRGifo9M4a/pVe

Malware Config

Extracted

Family

gozi

Targets

    • Target

      9497748dd75f86706ad5b92235856bc3_JaffaCakes118

    • Size

      1.8MB

    • MD5

      9497748dd75f86706ad5b92235856bc3

    • SHA1

      8c274f0b095f9533212d0171001d47e71919ddb2

    • SHA256

      497ab5f6e9f93865789889933c976b0265d8789500f6a97c28253342049a8596

    • SHA512

      f4821d7b4628cc20cb629b1d05f511ebaa78f5523d62f5052e9b2149e382341886d52fdb44d887a28f9fda0dd995f84e950e6fd70c91f2f725bbe08e444f76c8

    • SSDEEP

      24576:cxCXLaV+R50CJnXTd2qGi3P3df/dplGT9M4oR2WjKVeVe:2ILa4R6CVXTRGifo9M4a/pVe

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

MITRE ATT&CK Enterprise v15

Tasks