Overview

overview

10

Static

static

3

af01d12df0...77.exe

windows7-x64

10

af01d12df0...77.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_3a708d178a751b793015717b87cae2f7076ce282b864cb8047e50c42311854f4

  • Size

    162KB

  • Sample

    241221-2dwfga1ray

  • MD5

    8008e02e4cb1f0e2b87288cd3d852da6

  • SHA1

    736b356dfc29c1afdf88917c1d33372902dce93b

  • SHA256

    3a708d178a751b793015717b87cae2f7076ce282b864cb8047e50c42311854f4

  • SHA512

    25f1b5dc7ed852bd6f4f422f898d066a2d9e3fca85499ca87bcbc31df25070c078b36536d9c6928c5538ed391618d6a24b7295447fadff44e8e06ee720fc4e4c

  • SSDEEP

    3072:1eETfO/YHuTuccAkkn5RkD3E98fbrt6umzkvCJ4PtJq7Z4hSTMnlAJVFNp:08Gwy2DUDG308PoumqCwtIZnVF7

Score
10/10
gozi7621bankerdiscoveryisfbtrojan

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

7621

C2

forumlines.top

linkspremium.ru

premiumlists.ru
Attributes
  • base_path

    /drew/

  • build

    250225

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      af01d12df06f34e81f3772a1b661eef4f9086a73d953ea1c92a8408c4efa2e77

    • Size

      293KB

    • MD5

      8c79a57ed866e5382f054567bb4dcd6a

    • SHA1

      a3418e0724691c5d103238004f8ed546d560e5c4

    • SHA256

      af01d12df06f34e81f3772a1b661eef4f9086a73d953ea1c92a8408c4efa2e77

    • SHA512

      49eb95f1748854a3dc846f35df02ed2dbff64b29732bd248f91bbb693256ad3ff9eb5a41b07eca789982392152ff6535a0e33f06646683eb8c182f77191d4c80

    • SSDEEP

      6144:1lJBbCGiQedkMGM37T2iG+wBvAKLVqbNqb2:zbDidyMGs7w+w5jLVqZ

    Score
    10/10
    gozi7621bankerisfbtrojandiscovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks