General
-
Target
JaffaCakes118_7f554157f8f924fd620c2ca50c726c495791601dc9ec030f662dff184a7b0bde
-
Size
625KB
-
Sample
241224-tgz9ts1qaj
-
MD5
bbde62d2b7850b02b814a795c6c1cbdb
-
SHA1
9077e23673dd84fc23ff33b65135daa6230e61a1
-
SHA256
7f554157f8f924fd620c2ca50c726c495791601dc9ec030f662dff184a7b0bde
-
SHA512
7a153bba2473a2057a8a9b7587ea753ae23d8289888450b2838cd3eb8e403824c8b1adad735ec619527892dd758a976497db17bef557ba2b9ff58fb0fd2adcc5
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Zy:+w1lEKOpuYxiwkkgjAN8Zy
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7f554157f8f924fd620c2ca50c726c495791601dc9ec030f662dff184a7b0bde.dll
Resource
win7-20240903-en
Malware Config
Extracted
gozi
Extracted
gozi
999
config.edge.skype.com
146.70.35.138
146.70.35.142
-
base_path
/phpadmin/
-
build
250227
-
exe_type
loader
-
extension
.src
-
server_id
50
Targets
-
-
Target
JaffaCakes118_7f554157f8f924fd620c2ca50c726c495791601dc9ec030f662dff184a7b0bde
-
Size
625KB
-
MD5
bbde62d2b7850b02b814a795c6c1cbdb
-
SHA1
9077e23673dd84fc23ff33b65135daa6230e61a1
-
SHA256
7f554157f8f924fd620c2ca50c726c495791601dc9ec030f662dff184a7b0bde
-
SHA512
7a153bba2473a2057a8a9b7587ea753ae23d8289888450b2838cd3eb8e403824c8b1adad735ec619527892dd758a976497db17bef557ba2b9ff58fb0fd2adcc5
-
SSDEEP
12288:+w1lEKREbddtOYRbHzcPwka1dCjc3N8Zy:+w1lEKOpuYxiwkkgjAN8Zy
-
Gozi family
-
Blocklisted process makes network request
-