Analysis
-
max time kernel
140s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
11-10-2024 22:43
General
-
Target
372d075e782b781587e1018171e435f2_JaffaCakes118.exe
-
Size
350KB
-
MD5
372d075e782b781587e1018171e435f2
-
SHA1
e1dabd0f750b26f603ba0af7ab2e486618e8cc56
-
SHA256
760bacd8f9f7fe6cd701e510d21b768edd9d0805d4b82b332c849b0ba48456cc
-
SHA512
98158591b132be39c4ab69f1c497a59a852b39be94cb2e788322936c774166024ab45457dc73debb60c018576ff7856ff2b97e3d6f1c2c22a1784bb9c4da1322
-
SSDEEP
6144:RukiCIXQRFUPRLLHpsn4kI4JMWmaF0oc:R0vXqFMFHps4k9euz
Score
10/10
Malware Config
Extracted
Family
gozi
Attributes
-
build
217039
Signatures
-
Gozi
Gozi is a well-known and widely distributed banking trojan.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\372d075e782b781587e1018171e435f2_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\372d075e782b781587e1018171e435f2_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
16KB