Overview

overview

10

Static

static

10

JaffaCakes...c2.dll

windows7-x64

3

JaffaCakes...c2.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_e6f3b5857a2da506a0f5470400655fc4011600ae4253bba3dae85f7e6a9be6c2

  • Size

    43KB

  • MD5

    21e836bd521081f8b97c3e5a31822afe

  • SHA1

    fec35c2a1f2d362356573b25f0dd4a50c7be842e

  • SHA256

    e6f3b5857a2da506a0f5470400655fc4011600ae4253bba3dae85f7e6a9be6c2

  • SHA512

    c27856e4c417ff414c9365d68276a6678449886ac95bb99051fe61024fe2493c01cdd40789e89a0d047d18419db6fcd8085b7876cff3dbc8cd54f4623a6b3977

  • SSDEEP

    768:qRtKa9J343PPTIKyA+vgOZVGdX6Ib2HJQOJPP67g4gjpeprAkz:SKa9JI/bI7YOZcJb2pQOJH67ENcrbz

Score
10/10
isfb7613gozi

Malware Config

Extracted

Family

gozi

Botnet

7613

C2

interlines.top

interlines.space

linkspremium.ru

premiumlists.ru
Attributes
  • base_path

    /drew/

  • build

    250225

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

  • Gozi family
    gozi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_e6f3b5857a2da506a0f5470400655fc4011600ae4253bba3dae85f7e6a9be6c2
    .dll windows:5 windows x86 arch:x86

    0d41e840891676bdaee3e54973cf5a69


    Headers

    Imports

    Sections