General

  • Target

    2d130747a7e5b4afe8f4775fce20ad76_JaffaCakes118

  • Size

    2.9MB

  • Sample

    241009-h4m28sshlp

  • MD5

    2d130747a7e5b4afe8f4775fce20ad76

  • SHA1

    ff2c73be9278f16a268e500d66811de9282f63b8

  • SHA256

    b24a8262ddfbe90b795e3525bed6987cf8609c5ebd2f53884bdf2ae2b09e8be8

  • SHA512

    f8a1f243779f4513301525751d1013c67e399b640675fb4ab9f6784db91a226004648fd208f62b5113a43edf9c9f2955d9dce4d634ee55684204c0d0b6ff7d52

  • SSDEEP

    49152:fRHeTQKP6bSKBNbk1jErYc2WzryMhpxQqbrsI8O6P4M338dB2IBlGuuDVUsdxxjl:ftmP65BNCjEkc/z2tVPO6gg3gnl/IVU8

Score
10/10

Malware Config

Extracted

Family

gozi

Targets

    • Target

      2d130747a7e5b4afe8f4775fce20ad76_JaffaCakes118

    • Size

      2.9MB

    • MD5

      2d130747a7e5b4afe8f4775fce20ad76

    • SHA1

      ff2c73be9278f16a268e500d66811de9282f63b8

    • SHA256

      b24a8262ddfbe90b795e3525bed6987cf8609c5ebd2f53884bdf2ae2b09e8be8

    • SHA512

      f8a1f243779f4513301525751d1013c67e399b640675fb4ab9f6784db91a226004648fd208f62b5113a43edf9c9f2955d9dce4d634ee55684204c0d0b6ff7d52

    • SSDEEP

      49152:fRHeTQKP6bSKBNbk1jErYc2WzryMhpxQqbrsI8O6P4M338dB2IBlGuuDVUsdxxjl:ftmP65BNCjEkc/z2tVPO6gg3gnl/IVU8

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks