Analysis
-
max time kernel
140s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
06-10-2024 18:10
General
-
Target
192445230f3f4982b26df995da5a3ac4_JaffaCakes118.exe
-
Size
350KB
-
MD5
192445230f3f4982b26df995da5a3ac4
-
SHA1
ee4649bbb8635e76bcf707efe908fad6acf3620a
-
SHA256
894f96849e088ba6559f0f39d6226d0fa11a704328a996bf6567fd3991683631
-
SHA512
63b0c59c90fe370824a315852e20a933a811a9e50ce3d98aca1996fa0be453094c0a74299e7bd28759155851b685e962bea2b94c206d7cb9b8f1e1037cc79dcb
-
SSDEEP
6144:RukiCIXQRFUPRLLHpsn4kw4JMWmaF0oc:R0vXqFMFHps4kFeuz
Score
10/10
Malware Config
Extracted
Family
gozi
Attributes
-
build
217039
Signatures
-
Gozi
Gozi is a well-known and widely distributed banking trojan.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\192445230f3f4982b26df995da5a3ac4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\192445230f3f4982b26df995da5a3ac4_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
16KB