Analysis
-
max time kernel
140s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
06-12-2024 00:00
General
-
Target
ca07dc42e0c3130ee1626672b5ca850e_JaffaCakes118.exe
-
Size
350KB
-
MD5
ca07dc42e0c3130ee1626672b5ca850e
-
SHA1
c3b6264a04fb4c639830d543eafd37ab974dbda0
-
SHA256
b978fa291ad220dba1c78549c560d9f14ebe1140d6547916fc47c235c535236d
-
SHA512
c652a01dd074b6469e4b47bc778993a054d5e9aff568a527da7b04356164b5c6f3ef459db63d9c94eec7b3145b54f028ad98587a2d7ea132326632f403d37fda
-
SSDEEP
6144:RukiCIXQRFUPRLLHpsn4kA4JMWmaF0oc:R0vXqFMFHps4k1euz
Score
10/10
Malware Config
Extracted
Family
gozi
Attributes
-
build
217039
Signatures
-
Gozi
Gozi is a well-known and widely distributed banking trojan.
-
Gozi family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ca07dc42e0c3130ee1626672b5ca850e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ca07dc42e0c3130ee1626672b5ca850e_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
432KB
-
Filesize
16KB
-
Filesize
432KB
-
Filesize
432KB