Overview

overview

10

Static

static

3

af01d12df0...77.exe

windows7-x64

10

af01d12df0...77.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_efa88bf4ba09ecce24883df69d740291439acaffc9a34497f6b3975c8a955a53

  • Size

    162KB

  • Sample

    241223-1l3dbaslfs

  • MD5

    0fce73ad5585a59d9283a40fd6281bbf

  • SHA1

    cbaa4fb491faa4764b31e5e9d884a869b37709f5

  • SHA256

    efa88bf4ba09ecce24883df69d740291439acaffc9a34497f6b3975c8a955a53

  • SHA512

    35b38c09f7857377b265f36a05673dac524f1d3595745cbb5bdaedd22e105af5887ef8d639d5fc01657eebddbd518bdb4fd95d0b54ed236ded9ff1de5b38506c

  • SSDEEP

    3072:ueETfO/YHuTuccAkkn5RkD3E98fbrt6umzkvCJ4PtJq7Z4hSTMnlAJVFNS:N8Gwy2DUDG308PoumqCwtIZnVFk

Score
10/10
gozi7621bankerdiscoveryisfbtrojan

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

7621

C2

forumlines.top

linkspremium.ru

premiumlists.ru
Attributes
  • base_path

    /drew/

  • build

    250225

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      af01d12df06f34e81f3772a1b661eef4f9086a73d953ea1c92a8408c4efa2e77

    • Size

      293KB

    • MD5

      8c79a57ed866e5382f054567bb4dcd6a

    • SHA1

      a3418e0724691c5d103238004f8ed546d560e5c4

    • SHA256

      af01d12df06f34e81f3772a1b661eef4f9086a73d953ea1c92a8408c4efa2e77

    • SHA512

      49eb95f1748854a3dc846f35df02ed2dbff64b29732bd248f91bbb693256ad3ff9eb5a41b07eca789982392152ff6535a0e33f06646683eb8c182f77191d4c80

    • SSDEEP

      6144:1lJBbCGiQedkMGM37T2iG+wBvAKLVqbNqb2:zbDidyMGs7w+w5jLVqZ

    Score
    10/10
    gozi7621bankerdiscoveryisfbtrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks