General

  • Target

    b6a59580c919a323cc17c58f40772135_JaffaCakes118

  • Size

    14KB

  • Sample

    241202-ecltbaxrhw

  • MD5

    b6a59580c919a323cc17c58f40772135

  • SHA1

    851568c08aa3258528272b1fef4614e8e859c2b1

  • SHA256

    6dab84619d25fc3a1e70a234d9a19fbd67b09a2cb5f786ec428a9ad7f26d7c8a

  • SHA512

    5b41a5164a0fa08577c0067cd4a68f3e59c4693f296f8a2c44ea8c0a5b988c66c6a74d5a08e779209a72e09e943e51d9966603cf75aa7e865c950363fb00d3ad

  • SSDEEP

    384:50DmzaUBecFjRpSzqPng1mwGZla68KwrAh7SOnPF:50PUhRCm1qKiAZSOd

Score
10/10

Malware Config

Extracted

Family

gozi

Targets

    • Target

      b6a59580c919a323cc17c58f40772135_JaffaCakes118

    • Size

      14KB

    • MD5

      b6a59580c919a323cc17c58f40772135

    • SHA1

      851568c08aa3258528272b1fef4614e8e859c2b1

    • SHA256

      6dab84619d25fc3a1e70a234d9a19fbd67b09a2cb5f786ec428a9ad7f26d7c8a

    • SHA512

      5b41a5164a0fa08577c0067cd4a68f3e59c4693f296f8a2c44ea8c0a5b988c66c6a74d5a08e779209a72e09e943e51d9966603cf75aa7e865c950363fb00d3ad

    • SSDEEP

      384:50DmzaUBecFjRpSzqPng1mwGZla68KwrAh7SOnPF:50PUhRCm1qKiAZSOd

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks