Overview

overview

10

Static

static

1

1afe186bee...18.exe

windows7-x64

10

1afe186bee...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1afe186bee980790a4cfde35c4ac016f_JaffaCakes118

  • Size

    323KB

  • Sample

    241007-czxszsvard

  • MD5

    1afe186bee980790a4cfde35c4ac016f

  • SHA1

    565ffc32420a77059ae86197fed04a41aaa41a60

  • SHA256

    968bda985015ce75357321a8e69c8729e4859a8442c845b03b848db6014305e3

  • SHA512

    cc377d6b5c3fcdd37253c8f91ab1a86d2e1711550b5e9f527fb0205f1ecccbe238f9ab4d2e064ec6d5b22029e60e3b3ca99774c109947d9b06dc23288b40dbff

  • SSDEEP

    6144:ZUMcOTnGZ4Rt+tMFi3hnuHtFRDoWDpg1vX81b9+:Zx7gIt2VuFDoW9CvsC

Score
10/10
gozibankerdiscoveryisfbtrojan

Malware Config

Extracted

Family

gozi

Targets

    • Target

      1afe186bee980790a4cfde35c4ac016f_JaffaCakes118

    • Size

      323KB

    • MD5

      1afe186bee980790a4cfde35c4ac016f

    • SHA1

      565ffc32420a77059ae86197fed04a41aaa41a60

    • SHA256

      968bda985015ce75357321a8e69c8729e4859a8442c845b03b848db6014305e3

    • SHA512

      cc377d6b5c3fcdd37253c8f91ab1a86d2e1711550b5e9f527fb0205f1ecccbe238f9ab4d2e064ec6d5b22029e60e3b3ca99774c109947d9b06dc23288b40dbff

    • SSDEEP

      6144:ZUMcOTnGZ4Rt+tMFi3hnuHtFRDoWDpg1vX81b9+:Zx7gIt2VuFDoW9CvsC

    Score
    10/10
    gozibankerisfbtrojandiscovery

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

      bankertrojangozi
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks