General

  • Target

    2fc3d87b0de69b41b06db5e06f135e78_JaffaCakes118

  • Size

    5.8MB

  • Sample

    241009-mwajds1gmp

  • MD5

    2fc3d87b0de69b41b06db5e06f135e78

  • SHA1

    c28120839a68c7d6e485fe108e0359063b6e61ca

  • SHA256

    d84bec88bd4bd63c011014b5a5ac2a040abefd12d5df3b67e841f3570a64e47a

  • SHA512

    7800767b6a76605c818d5c5cca6b8be1bf8a3dbffbd1ddde34c97324ee58b130a5e805b42f3eb7dde0a700be6c6dc529bdb23a5dfe71ef15dabcf7dc2dccc3a4

  • SSDEEP

    98304:6BF/V8EPp6CI2jGQZaXhP5a9UEI+eG9jAkbkR79D+cVItGQZaXhP5a9UEI+eG:+IMBGhRaaCkN9qHGhRa

Score
10/10

Malware Config

Extracted

Family

gozi

Targets

    • Target

      2fc3d87b0de69b41b06db5e06f135e78_JaffaCakes118

    • Size

      5.8MB

    • MD5

      2fc3d87b0de69b41b06db5e06f135e78

    • SHA1

      c28120839a68c7d6e485fe108e0359063b6e61ca

    • SHA256

      d84bec88bd4bd63c011014b5a5ac2a040abefd12d5df3b67e841f3570a64e47a

    • SHA512

      7800767b6a76605c818d5c5cca6b8be1bf8a3dbffbd1ddde34c97324ee58b130a5e805b42f3eb7dde0a700be6c6dc529bdb23a5dfe71ef15dabcf7dc2dccc3a4

    • SSDEEP

      98304:6BF/V8EPp6CI2jGQZaXhP5a9UEI+eG9jAkbkR79D+cVItGQZaXhP5a9UEI+eG:+IMBGhRaaCkN9qHGhRa

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks