General

  • Target

    718832eee3b199d8b87b643891ca446d_JaffaCakes118

  • Size

    1.2MB

  • Sample

    241024-avc7nsydkk

  • MD5

    718832eee3b199d8b87b643891ca446d

  • SHA1

    270a579ceb57d4772b00460ddf12bb43d33e1c82

  • SHA256

    f4fa46cc364a6ca6cf3cca0424647ee6c5db852424eee3e30d867d1832bd3fd8

  • SHA512

    f59fa488fd1dd7921c7d55c56671f32fd7d236e307c9ac400e5b80a73ca33b550375768876284b2c515e8d17bbe3aa03276fd04cb678c84e3da75321a1d87583

  • SSDEEP

    24576:i4ireStg02UNLLeVxD/umgvUZ1rnyo5esKLMfgrw4sijXktErWb:niru02+WDWDv01rnp5esXfgEfCXk2r

Malware Config

Extracted

Family

gozi

Targets

    • Target

      718832eee3b199d8b87b643891ca446d_JaffaCakes118

    • Size

      1.2MB

    • MD5

      718832eee3b199d8b87b643891ca446d

    • SHA1

      270a579ceb57d4772b00460ddf12bb43d33e1c82

    • SHA256

      f4fa46cc364a6ca6cf3cca0424647ee6c5db852424eee3e30d867d1832bd3fd8

    • SHA512

      f59fa488fd1dd7921c7d55c56671f32fd7d236e307c9ac400e5b80a73ca33b550375768876284b2c515e8d17bbe3aa03276fd04cb678c84e3da75321a1d87583

    • SSDEEP

      24576:i4ireStg02UNLLeVxD/umgvUZ1rnyo5esKLMfgrw4sijXktErWb:niru02+WDWDv01rnp5esXfgEfCXk2r

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

MITRE ATT&CK Enterprise v15

Tasks