Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

48c862de90...18.dll

windows7-x64

3

48c862de90...18.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48c862de90f908af7040248fcfb59b1e_JaffaCakes118

  • Size

    50KB

  • MD5

    48c862de90f908af7040248fcfb59b1e

  • SHA1

    cece2de01c06efcf1c3e8524cad3dbcbab7e102d

  • SHA256

    519bb9a2fef0ef4ec71449960dc44c80bf91745263d61ab72c2bf8ae0c732048

  • SHA512

    7622816c0048d2e152d06c2094cfc306ed03369d7967875d723c47de68e6b0f0c0957d3197c3575ea5dcbe283a68f80c5cfd7dd8eaa951a6041835974a82a7cb

  • SSDEEP

    1536:jiOtW7hqlalXHQc1cWIyHGyzVR7fsMH57k/q:OOtW7hqlalXnuyHl7fV57k

Score
10/10
isfb1091gozi

Malware Config

Extracted

Family

gozi

Botnet

1091

C2

pop.project-ip.co.uk

Attributes
  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Signatures

  • Gozi family
    gozi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 48c862de90f908af7040248fcfb59b1e_JaffaCakes118
    .dll windows:4 windows x86 arch:x86

    8f04b2a4b397f8115ddeb5445e696d0c


    Headers

    Imports

    Sections