Analysis
-
max time kernel
141s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
15-12-2024 03:48
General
-
Target
f223d57af3bd429fc77c751d3cbe695f_JaffaCakes118.exe
-
Size
350KB
-
MD5
f223d57af3bd429fc77c751d3cbe695f
-
SHA1
9b0d57d357e198f82ba5314b4445b84334dc5690
-
SHA256
b7b61d19b86922f23e094a36cadf0a5678b4a6876625103bfb50f3d481de33ca
-
SHA512
e2c4a6e437269589628f5239ec0e8a1557ff794d723cf2dfee6c29564b6c8a5b1c77ae72c86b46d415d5e70654812623e3f8761a2d12a834d3583827fdcbf406
-
SSDEEP
6144:RukiCIXQRFUPRLLHpsn4kk4JMWmaF0oc:R0vXqFMFHps4kZeuz
Score
10/10
Malware Config
Extracted
Family
gozi
Attributes
-
build
217039
Signatures
-
Gozi
Gozi is a well-known and widely distributed banking trojan.
-
Gozi family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f223d57af3bd429fc77c751d3cbe695f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f223d57af3bd429fc77c751d3cbe695f_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
432KB
-
Filesize
16KB
-
Filesize
432KB
-
Filesize
432KB
-
Filesize
16KB