Overview

overview

10

Static

static

10

JaffaCakes...e9.dll

windows7-x64

3

JaffaCakes...e9.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_9e5c04e473418dc89e791346a293037f9f0c7462ba652286f5ffb34df98a00e9

  • Size

    340KB

  • MD5

    73f78e523dc7b85796cfa7cfbfb7e612

  • SHA1

    cf3e1f4b7a565e9049afe16f09e02e35f4a5fc9f

  • SHA256

    9e5c04e473418dc89e791346a293037f9f0c7462ba652286f5ffb34df98a00e9

  • SHA512

    d1ba66756e6d46bb29ad4d512fc67e5e467254ceb6e2410a10545d1014ec2d9786ef39cd5d67d248f6b3e24b9729850fb5166454eb02ce2c4f696926a15e8138

  • SSDEEP

    768:67+IGQ9UPJlwvMoyIeb8EvnVBosnO1T2VOYcV0HRoJvv5:67+ykn8zeblt6T2VOcihv

Score
10/10
isfb7629gozi

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

7629

C2

jointoblog.top

linkspremium.ru

premiumlists.ru
Attributes
  • base_path

    /drew/

  • build

    250225

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

  • Gozi family
    gozi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_9e5c04e473418dc89e791346a293037f9f0c7462ba652286f5ffb34df98a00e9
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections