General
-
Target
JaffaCakes118_3f19922401c1c6c8ee62a059df83752a1279a394641186a834327119c6f3b72e
-
Size
625KB
-
Sample
241222-y8wsyaxqhy
-
MD5
1563614c712b92e6d391f5a1b1be69f4
-
SHA1
c09c6942d2c1bc34f8a2f577a10a1209777de7ab
-
SHA256
3f19922401c1c6c8ee62a059df83752a1279a394641186a834327119c6f3b72e
-
SHA512
509f571cfa81ec60d475cf9948772d846eca0f273cbe1317587f9b06919822ed30ec2d770160ecc1ab04f0878eafc66699b01cf10e11b86bb6606d5b71189099
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8ZZ:+w1lEKOpuYxiwkkgjAN8ZZ
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_3f19922401c1c6c8ee62a059df83752a1279a394641186a834327119c6f3b72e.dll
Resource
win7-20240903-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_3f19922401c1c6c8ee62a059df83752a1279a394641186a834327119c6f3b72e
-
Size
625KB
-
MD5
1563614c712b92e6d391f5a1b1be69f4
-
SHA1
c09c6942d2c1bc34f8a2f577a10a1209777de7ab
-
SHA256
3f19922401c1c6c8ee62a059df83752a1279a394641186a834327119c6f3b72e
-
SHA512
509f571cfa81ec60d475cf9948772d846eca0f273cbe1317587f9b06919822ed30ec2d770160ecc1ab04f0878eafc66699b01cf10e11b86bb6606d5b71189099
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8ZZ:+w1lEKOpuYxiwkkgjAN8ZZ
-
Gozi family
-
Blocklisted process makes network request
-