General
-
Target
JaffaCakes118_86e072dd712b160d39a7196822a1a2c1827993236f92cd185a415ad04929e831
-
Size
625KB
-
Sample
241222-mh61favmem
-
MD5
b8beffa14f03cfe58f3e5145d66368ef
-
SHA1
9da6b3bfdd91c3376b6fe0f50513a8af45b109ec
-
SHA256
86e072dd712b160d39a7196822a1a2c1827993236f92cd185a415ad04929e831
-
SHA512
3edc40652f9cc8f76dfc4ab81f3f3fa4020642a06a812113a574c81afa5281a0e716d3cb697842cd0b28ce06ecb439015a8dd90f8581b4db585cf91af40751a4
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8ZmW:+w1lEKOpuYxiwkkgjAN8ZmW
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_86e072dd712b160d39a7196822a1a2c1827993236f92cd185a415ad04929e831.dll
Resource
win7-20240903-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_86e072dd712b160d39a7196822a1a2c1827993236f92cd185a415ad04929e831
-
Size
625KB
-
MD5
b8beffa14f03cfe58f3e5145d66368ef
-
SHA1
9da6b3bfdd91c3376b6fe0f50513a8af45b109ec
-
SHA256
86e072dd712b160d39a7196822a1a2c1827993236f92cd185a415ad04929e831
-
SHA512
3edc40652f9cc8f76dfc4ab81f3f3fa4020642a06a812113a574c81afa5281a0e716d3cb697842cd0b28ce06ecb439015a8dd90f8581b4db585cf91af40751a4
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8ZmW:+w1lEKOpuYxiwkkgjAN8ZmW
-
Gozi family
-
Blocklisted process makes network request
-