General

  • Target

    380101013ee146550360774ffe9a1b19_JaffaCakes118

  • Size

    174KB

  • Sample

    241012-cvpltaxelh

  • MD5

    380101013ee146550360774ffe9a1b19

  • SHA1

    98657dda4736f85c9ce44f48d31d478dd3511480

  • SHA256

    89cde1aef4ac35c92719fc129a77ea921026da2c386eb3839254c8663d33b0dd

  • SHA512

    72555144369bf1332019b79beae67bd26442e5303da31fa28db0e3c70356e33965e607bdb67a0fabe7c2b47ec133dd0837326d99326cb9b12eca0e1b4c383b94

  • SSDEEP

    3072:9gTAK/2KCyw/bqVkdCuCCOhqr8TcNoK4Bdew9eeni+XuQ4ZgvsX4yc:2v/2H+CQuv++uoGq+XuhZgvsjc

Malware Config

Extracted

Family

gozi

Targets

    • Target

      380101013ee146550360774ffe9a1b19_JaffaCakes118

    • Size

      174KB

    • MD5

      380101013ee146550360774ffe9a1b19

    • SHA1

      98657dda4736f85c9ce44f48d31d478dd3511480

    • SHA256

      89cde1aef4ac35c92719fc129a77ea921026da2c386eb3839254c8663d33b0dd

    • SHA512

      72555144369bf1332019b79beae67bd26442e5303da31fa28db0e3c70356e33965e607bdb67a0fabe7c2b47ec133dd0837326d99326cb9b12eca0e1b4c383b94

    • SSDEEP

      3072:9gTAK/2KCyw/bqVkdCuCCOhqr8TcNoK4Bdew9eeni+XuQ4ZgvsX4yc:2v/2H+CQuv++uoGq+XuhZgvsjc

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

MITRE ATT&CK Enterprise v15

Tasks