Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

dc196388fe...18.dll

windows7-x64

10

dc196388fe...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc196388fe348c76c9008531b5e579a9_JaffaCakes118

  • Size

    421KB

  • Sample

    240912-jv7wqayfjr

  • MD5

    dc196388fe348c76c9008531b5e579a9

  • SHA1

    e0eb8ad11f6c896bc3f905f4e885fb1db7883edd

  • SHA256

    9b8d718f7de61529733c5ee556e089ca281e35e9141060a2b6e5fbac9c574293

  • SHA512

    a5d3896c524a642bccd948907f8bc268df041705e0a1e7bff79ece151d4e8744a967b361588c9292a866c8568eddfb3bbaad4bd73aab4cc66840e6487cf842f3

  • SSDEEP

    6144:7TfkafAO0f7VSUZ57hEUWsVCem6ndZUVj6MMfeWvvDZZz9XbccuC96zLprRCmf1P:p2f7VxHgsVCem/jzCgcuCwx0oTFpl/z

Score
10/10
gozi2200bankerdiscoveryisfbtrojan

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

2200

C2

api10.laptok.at/api1

Attributes
  • build

    250155

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    730

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      dc196388fe348c76c9008531b5e579a9_JaffaCakes118

    • Size

      421KB

    • MD5

      dc196388fe348c76c9008531b5e579a9

    • SHA1

      e0eb8ad11f6c896bc3f905f4e885fb1db7883edd

    • SHA256

      9b8d718f7de61529733c5ee556e089ca281e35e9141060a2b6e5fbac9c574293

    • SHA512

      a5d3896c524a642bccd948907f8bc268df041705e0a1e7bff79ece151d4e8744a967b361588c9292a866c8568eddfb3bbaad4bd73aab4cc66840e6487cf842f3

    • SSDEEP

      6144:7TfkafAO0f7VSUZ57hEUWsVCem6ndZUVj6MMfeWvvDZZz9XbccuC96zLprRCmf1P:p2f7VxHgsVCem/jzCgcuCwx0oTFpl/z

    Score
    10/10
    gozi2200bankerdiscoveryisfbtrojan

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

      bankertrojangozi
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks