Overview

overview

10

Static

static

10

JaffaCakes...aa.dll

windows7-x64

3

JaffaCakes...aa.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_a120212d83550d08982aabc8af214cd596b69b54d71dee0e493046b3034871aa

  • Size

    56KB

  • Sample

    241225-cl8nbsvjdl

  • MD5

    b8e4f38650912b7986118c969417d288

  • SHA1

    6eb34613fdd59ed06130ed5011f5dcaa6a9e3341

  • SHA256

    a120212d83550d08982aabc8af214cd596b69b54d71dee0e493046b3034871aa

  • SHA512

    a0c2f037cd9f4c78e5e2865efdffea6ba0d9892c04f73f70d2d77c7e51130c139ee4701ae2731ba7676959e96f896610633f59d68df34505c8d94ef453fa0d2d

  • SSDEEP

    768:EqY2TDU+Jx38vVey5eb8EvnVBosnO1T2VOYcV0HRoJvv5E:EqYs7X3B2eblt6T2VOcihv

Score
10/10
gozi7625discoveryisfb

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

7625

C2

sistemliner.top

linkspremium.ru

premiumlists.ru
Attributes
  • base_path

    /drew/

  • build

    250225

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      JaffaCakes118_a120212d83550d08982aabc8af214cd596b69b54d71dee0e493046b3034871aa

    • Size

      56KB

    • MD5

      b8e4f38650912b7986118c969417d288

    • SHA1

      6eb34613fdd59ed06130ed5011f5dcaa6a9e3341

    • SHA256

      a120212d83550d08982aabc8af214cd596b69b54d71dee0e493046b3034871aa

    • SHA512

      a0c2f037cd9f4c78e5e2865efdffea6ba0d9892c04f73f70d2d77c7e51130c139ee4701ae2731ba7676959e96f896610633f59d68df34505c8d94ef453fa0d2d

    • SSDEEP

      768:EqY2TDU+Jx38vVey5eb8EvnVBosnO1T2VOYcV0HRoJvv5E:EqYs7X3B2eblt6T2VOcihv

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks