General

  • Target

    JaffaCakes118_75df7fec9064eb711a22cfff709b8cd4

  • Size

    14KB

  • Sample

    250315-ky77bsy1ev

  • MD5

    75df7fec9064eb711a22cfff709b8cd4

  • SHA1

    e4bfff57eb9d77c246fa5c1efadd7a521d2046f4

  • SHA256

    1a0ec1fc25dcc311a4e4eb67a1a94285b2d9f4ae269cc7abd81044d3683e8a72

  • SHA512

    f9f0f2769aae73c1ab874ba7fedf050781be3a02fb8019f74c60bfea564cf68e9bcf6ff631a20fdf8729cf39072ef9f9aa3f358d59f1eb52d1243489e9b994f3

  • SSDEEP

    384:I0mhBKIRyiUOvPNXekQDTnwbg/c6VbRWtSlbFieNi:I0GEuFUoNMQt+ba

Score
10/10

Malware Config

Extracted

Family

gozi

Targets

    • Target

      JaffaCakes118_75df7fec9064eb711a22cfff709b8cd4

    • Size

      14KB

    • MD5

      75df7fec9064eb711a22cfff709b8cd4

    • SHA1

      e4bfff57eb9d77c246fa5c1efadd7a521d2046f4

    • SHA256

      1a0ec1fc25dcc311a4e4eb67a1a94285b2d9f4ae269cc7abd81044d3683e8a72

    • SHA512

      f9f0f2769aae73c1ab874ba7fedf050781be3a02fb8019f74c60bfea564cf68e9bcf6ff631a20fdf8729cf39072ef9f9aa3f358d59f1eb52d1243489e9b994f3

    • SSDEEP

      384:I0mhBKIRyiUOvPNXekQDTnwbg/c6VbRWtSlbFieNi:I0GEuFUoNMQt+ba

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks