General

  • Target

    c68bc4b4494c7b4b1c75525a3e7af20a_JaffaCakes118

  • Size

    2.9MB

  • Sample

    241205-h5f1bazpbl

  • MD5

    c68bc4b4494c7b4b1c75525a3e7af20a

  • SHA1

    c257088a64b9f1759d161d7232fb6f7b8abb5ffe

  • SHA256

    82e29e0e39af8319cd9a8e454c1712f017460cb4d959286681b57aae0b74c932

  • SHA512

    19bbc38961c017bf7bf2dda5322d25769be7680f9d95646a211e63e501c5e798bc9c917cdc79571cfeedf81966e964fefeca03a21bd14ebf5932855cb5a85729

  • SSDEEP

    49152:nwJ+vL6syajqoltXB5bKycvd2zi4cP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:n6meaPXfKT8lcgg3gnl/IVUs1jePs

Score
10/10

Malware Config

Extracted

Family

gozi

Targets

    • Target

      c68bc4b4494c7b4b1c75525a3e7af20a_JaffaCakes118

    • Size

      2.9MB

    • MD5

      c68bc4b4494c7b4b1c75525a3e7af20a

    • SHA1

      c257088a64b9f1759d161d7232fb6f7b8abb5ffe

    • SHA256

      82e29e0e39af8319cd9a8e454c1712f017460cb4d959286681b57aae0b74c932

    • SHA512

      19bbc38961c017bf7bf2dda5322d25769be7680f9d95646a211e63e501c5e798bc9c917cdc79571cfeedf81966e964fefeca03a21bd14ebf5932855cb5a85729

    • SSDEEP

      49152:nwJ+vL6syajqoltXB5bKycvd2zi4cP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:n6meaPXfKT8lcgg3gnl/IVUs1jePs

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks