Overview

overview

10

Static

static

3

18f05d6546...18.dll

windows7-x64

10

18f05d6546...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18f05d6546ef7e942f36ce47bd3603c8_JaffaCakes118

  • Size

    116KB

  • Sample

    241006-vjvb2avdqm

  • MD5

    18f05d6546ef7e942f36ce47bd3603c8

  • SHA1

    1b8878f55235af305d7abfe82768d98e75bdcc88

  • SHA256

    ac6fbfbf539638215c1d7f6887f2754d44e96c3d55eb1e2314af4c4378e9d647

  • SHA512

    4f79d87bade783f02083eb782f03bf5b4d32321285f69d08d25c4512e1bd7f9f9232316664ed1975851edc51d40cec47776a2db7be869cb6cda1a4e77f24fc53

  • SSDEEP

    3072:ewpeSJblsSA9RTWJ0hmgdNF3+0Xis7vr:XBJ+T9RTWJEmgdXOGp

Score
10/10
gozibankerdiscoverytrojan

Malware Config

Targets

    • Target

      18f05d6546ef7e942f36ce47bd3603c8_JaffaCakes118

    • Size

      116KB

    • MD5

      18f05d6546ef7e942f36ce47bd3603c8

    • SHA1

      1b8878f55235af305d7abfe82768d98e75bdcc88

    • SHA256

      ac6fbfbf539638215c1d7f6887f2754d44e96c3d55eb1e2314af4c4378e9d647

    • SHA512

      4f79d87bade783f02083eb782f03bf5b4d32321285f69d08d25c4512e1bd7f9f9232316664ed1975851edc51d40cec47776a2db7be869cb6cda1a4e77f24fc53

    • SSDEEP

      3072:ewpeSJblsSA9RTWJ0hmgdNF3+0Xis7vr:XBJ+T9RTWJEmgdXOGp

    Score
    10/10
    gozibankerdiscoverytrojan

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

      bankertrojangozi
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks