General
-
Target
JaffaCakes118_ddae717adcbba8b489ecc96572534f93b1b16d3aaf7f7fac9ddc7d9d397b1fc5
-
Size
625KB
-
Sample
241222-h6cpaaypbz
-
MD5
dc86b0b7f63826af1fa09ea15bf28286
-
SHA1
1e7ab4e66923fc206be83d172a383c9563d29ee3
-
SHA256
ddae717adcbba8b489ecc96572534f93b1b16d3aaf7f7fac9ddc7d9d397b1fc5
-
SHA512
a75c0012caeca4b1c5a20ef1ca61c833338a8ea2fedb1df2beb8e0ccd7e2211173fa25afce333b185dbb5e8c49b6dce51ee3dd9b3617f33d7871932c43bc21db
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Z4:+w1lEKOpuYxiwkkgjAN8Z4
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_ddae717adcbba8b489ecc96572534f93b1b16d3aaf7f7fac9ddc7d9d397b1fc5.dll
Resource
win7-20241010-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_ddae717adcbba8b489ecc96572534f93b1b16d3aaf7f7fac9ddc7d9d397b1fc5
-
Size
625KB
-
MD5
dc86b0b7f63826af1fa09ea15bf28286
-
SHA1
1e7ab4e66923fc206be83d172a383c9563d29ee3
-
SHA256
ddae717adcbba8b489ecc96572534f93b1b16d3aaf7f7fac9ddc7d9d397b1fc5
-
SHA512
a75c0012caeca4b1c5a20ef1ca61c833338a8ea2fedb1df2beb8e0ccd7e2211173fa25afce333b185dbb5e8c49b6dce51ee3dd9b3617f33d7871932c43bc21db
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Z4:+w1lEKOpuYxiwkkgjAN8Z4
-
Gozi family
-
Blocklisted process makes network request
-