General
-
Target
b6a59580c919a323cc17c58f40772135_JaffaCakes118
-
Size
14KB
-
Sample
241202-ecltbaxrhw
-
MD5
b6a59580c919a323cc17c58f40772135
-
SHA1
851568c08aa3258528272b1fef4614e8e859c2b1
-
SHA256
6dab84619d25fc3a1e70a234d9a19fbd67b09a2cb5f786ec428a9ad7f26d7c8a
-
SHA512
5b41a5164a0fa08577c0067cd4a68f3e59c4693f296f8a2c44ea8c0a5b988c66c6a74d5a08e779209a72e09e943e51d9966603cf75aa7e865c950363fb00d3ad
-
SSDEEP
384:50DmzaUBecFjRpSzqPng1mwGZla68KwrAh7SOnPF:50PUhRCm1qKiAZSOd
Behavioral task
behavioral1
Sample
b6a59580c919a323cc17c58f40772135_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
gozi
Targets
-
-
Target
b6a59580c919a323cc17c58f40772135_JaffaCakes118
-
Size
14KB
-
MD5
b6a59580c919a323cc17c58f40772135
-
SHA1
851568c08aa3258528272b1fef4614e8e859c2b1
-
SHA256
6dab84619d25fc3a1e70a234d9a19fbd67b09a2cb5f786ec428a9ad7f26d7c8a
-
SHA512
5b41a5164a0fa08577c0067cd4a68f3e59c4693f296f8a2c44ea8c0a5b988c66c6a74d5a08e779209a72e09e943e51d9966603cf75aa7e865c950363fb00d3ad
-
SSDEEP
384:50DmzaUBecFjRpSzqPng1mwGZla68KwrAh7SOnPF:50PUhRCm1qKiAZSOd
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-