General
-
Target
JaffaCakes118_816d0e4a7c012768d831c3aa3206129dd3aed266777d280cff23aca7077333c3
-
Size
624KB
-
Sample
241222-l95e9atphw
-
MD5
2e03975c308762b8ab95d5ae54ec91ca
-
SHA1
cbf4ca69ecafa616478cd7c00925b015df713039
-
SHA256
816d0e4a7c012768d831c3aa3206129dd3aed266777d280cff23aca7077333c3
-
SHA512
9f7df394d1e2a649d2d7e68931ce5ec2bbe02b1fbcf74f6b42085bab9359ed78f8b3c9bc6457fde4f9e153bbbeeba92636a6d972cec9d4bc663c9e7605107032
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Z7:+w1lEKOpuYxiwkkgjAN8Z7
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_816d0e4a7c012768d831c3aa3206129dd3aed266777d280cff23aca7077333c3.dll
Resource
win7-20240903-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_816d0e4a7c012768d831c3aa3206129dd3aed266777d280cff23aca7077333c3
-
Size
624KB
-
MD5
2e03975c308762b8ab95d5ae54ec91ca
-
SHA1
cbf4ca69ecafa616478cd7c00925b015df713039
-
SHA256
816d0e4a7c012768d831c3aa3206129dd3aed266777d280cff23aca7077333c3
-
SHA512
9f7df394d1e2a649d2d7e68931ce5ec2bbe02b1fbcf74f6b42085bab9359ed78f8b3c9bc6457fde4f9e153bbbeeba92636a6d972cec9d4bc663c9e7605107032
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Z7:+w1lEKOpuYxiwkkgjAN8Z7
-
Gozi family
-
Blocklisted process makes network request
-