gozi | 02bc2b5c1f0cea08dd8f5350768f1a39c4df05b231c5a9b5b42c6a509c689b91 | Triage

Sharing

General

Target

9f32b902a86571359bceaab835ffdcd6_JaffaCakes118
Size

22KB
Sample

241126-cerfgaxrhz
MD5

9f32b902a86571359bceaab835ffdcd6
SHA1

c66a8fa12cf2d63d2a156f23218a84dcabf49fec
SHA256

02bc2b5c1f0cea08dd8f5350768f1a39c4df05b231c5a9b5b42c6a509c689b91
SHA512

aa2e11598f95724bc44b42cb75a69450a3f009e6730ec9f72814f93dfa70c33cd0ed864427e878a3573f105abec3d66c2a0b5925ebe3b13ede37f7035baf25ce
SSDEEP

384:tatuSKaN6ojDrEaUEX1/pXWAQe3YLrdUdHtVUkyxo1L+ybVcRPLM:tat976oj5UExpXDQKY1UdHzif6c5Q

Score

10^/10

gozi discovery isfb

Malware Config

Extracted

Family

gozi

Targets

- Target
  
  9f32b902a86571359bceaab835ffdcd6_JaffaCakes118
- Size
  
  22KB
- MD5
  
  9f32b902a86571359bceaab835ffdcd6
- SHA1
  
  c66a8fa12cf2d63d2a156f23218a84dcabf49fec
- SHA256
  
  02bc2b5c1f0cea08dd8f5350768f1a39c4df05b231c5a9b5b42c6a509c689b91
- SHA512
  
  aa2e11598f95724bc44b42cb75a69450a3f009e6730ec9f72814f93dfa70c33cd0ed864427e878a3573f105abec3d66c2a0b5925ebe3b13ede37f7035baf25ce
- SSDEEP
  
  384:tatuSKaN6ojDrEaUEX1/pXWAQe3YLrdUdHtVUkyxo1L+ybVcRPLM:tat976oj5UExpXDQKY1UdHzif6c5Q
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2