gozi | d9a2f91ab87503ea0200f6bed73e0bd43b9b00a3a4b21bd1944f201abcc5b677 | Triage

Sharing

General

Target

adc92ef60183a83033d26b67c8b2ce97_JaffaCakes118
Size

31KB
Sample

241128-2jfl7stkbw
MD5

adc92ef60183a83033d26b67c8b2ce97
SHA1

f76356e544ba18a83e2a4d6edfa4390640e49e30
SHA256

d9a2f91ab87503ea0200f6bed73e0bd43b9b00a3a4b21bd1944f201abcc5b677
SHA512

264e5995d546d4bd20d24ef9f36df7018b9454bccc6ec998d4ac4296cffe95f16fa69328898b71328c4b88483bfd873b7995e206d476f9653c6b462441cb8850
SSDEEP

384:RdVGuSKaNKEu6YTOBX50IoPIyg8tW0xFcGVCT9FANN+a/DstCEqWUnWYzsXwzQOF:Re97KEuA95toQZ8b0aA2Wg86SZ5Q

Score

10^/10

gozi discovery isfb

Malware Config

Extracted

Family

gozi

Targets

- Target
  
  adc92ef60183a83033d26b67c8b2ce97_JaffaCakes118
- Size
  
  31KB
- MD5
  
  adc92ef60183a83033d26b67c8b2ce97
- SHA1
  
  f76356e544ba18a83e2a4d6edfa4390640e49e30
- SHA256
  
  d9a2f91ab87503ea0200f6bed73e0bd43b9b00a3a4b21bd1944f201abcc5b677
- SHA512
  
  264e5995d546d4bd20d24ef9f36df7018b9454bccc6ec998d4ac4296cffe95f16fa69328898b71328c4b88483bfd873b7995e206d476f9653c6b462441cb8850
- SSDEEP
  
  384:RdVGuSKaNKEu6YTOBX50IoPIyg8tW0xFcGVCT9FANN+a/DstCEqWUnWYzsXwzQOF:Re97KEuA95toQZ8b0aA2Wg86SZ5Q
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2