General
-
Target
JaffaCakes118_c6e1c6d98b59a4624ea1f6d5f0abca1db00eb33d9ec74d930b5a103668ddd0c7
-
Size
625KB
-
Sample
241221-wpyr3svqas
-
MD5
f1eb82596469759a7176cf441923d1ae
-
SHA1
356b3170c102488565db7b00c6d51db6ea4acffb
-
SHA256
c6e1c6d98b59a4624ea1f6d5f0abca1db00eb33d9ec74d930b5a103668ddd0c7
-
SHA512
91b7b57abffe91241fd4bce6ec0f5b1649ff204ff9b148f2baca8b4fc511a00bf619d627f8c99ce310bcf0c9479c07ba0b92a3e6865db60a16fbf6793f4140c8
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Zc:+w1lEKOpuYxiwkkgjAN8Zc
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_c6e1c6d98b59a4624ea1f6d5f0abca1db00eb33d9ec74d930b5a103668ddd0c7.dll
Resource
win7-20241010-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_c6e1c6d98b59a4624ea1f6d5f0abca1db00eb33d9ec74d930b5a103668ddd0c7
-
Size
625KB
-
MD5
f1eb82596469759a7176cf441923d1ae
-
SHA1
356b3170c102488565db7b00c6d51db6ea4acffb
-
SHA256
c6e1c6d98b59a4624ea1f6d5f0abca1db00eb33d9ec74d930b5a103668ddd0c7
-
SHA512
91b7b57abffe91241fd4bce6ec0f5b1649ff204ff9b148f2baca8b4fc511a00bf619d627f8c99ce310bcf0c9479c07ba0b92a3e6865db60a16fbf6793f4140c8
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Zc:+w1lEKOpuYxiwkkgjAN8Zc
-
Gozi family
-
Blocklisted process makes network request
-