General

  • Target

    JaffaCakes118_144d46d31aaaa265bbb9f4e39b8a192e

  • Size

    15KB

  • Sample

    250221-wj7ssswpfw

  • MD5

    144d46d31aaaa265bbb9f4e39b8a192e

  • SHA1

    bf0fe263d8b8d0720c788ab4436963d0abbe10db

  • SHA256

    6936f3b7338e3504564e1f7f64d883774d92b44a9cb775855cd370f1e6fd2bbb

  • SHA512

    5a7f608b56bc748d12cd9630a25cce27434c6b365e194a6e71c26d51e04c78942237dfe719ad835854683e6a1a8765b6a860c943fb3b4171743845b9f04fd120

  • SSDEEP

    384:q06KR0Mk9XOU3+RqDYkWTMLYn2Kz/SdmIyx:q06f6C6oYbjn2wSy

Score
10/10

Malware Config

Extracted

Family

gozi

Targets

    • Target

      JaffaCakes118_144d46d31aaaa265bbb9f4e39b8a192e

    • Size

      15KB

    • MD5

      144d46d31aaaa265bbb9f4e39b8a192e

    • SHA1

      bf0fe263d8b8d0720c788ab4436963d0abbe10db

    • SHA256

      6936f3b7338e3504564e1f7f64d883774d92b44a9cb775855cd370f1e6fd2bbb

    • SHA512

      5a7f608b56bc748d12cd9630a25cce27434c6b365e194a6e71c26d51e04c78942237dfe719ad835854683e6a1a8765b6a860c943fb3b4171743845b9f04fd120

    • SSDEEP

      384:q06KR0Mk9XOU3+RqDYkWTMLYn2Kz/SdmIyx:q06f6C6oYbjn2wSy

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks