General

  • Target

    JaffaCakes118_8340a0f26a3d98a10bdd34d0d29b17a2

  • Size

    15KB

  • Sample

    250321-pwh7msysb1

  • MD5

    8340a0f26a3d98a10bdd34d0d29b17a2

  • SHA1

    6e4aec1957893b5ac41f681209a1fce0ecee4362

  • SHA256

    c650cd35d36243f3952b8acc66f136ca815366f6ff5be577ff6126f3e5726c21

  • SHA512

    2cf708c1c3dbada6f2e472dd45de6bed39981d1d0584361159a1fcb16afa093f652237c868437a9349e81f10178a15fa77713b441cbebfab07f50be327f72be5

  • SSDEEP

    384:e90YG11IixjvZ0HBEWqZQc8wWehuV0xYTsW9M:G0YZHmPi7wzuV0aTsr

Score
10/10

Malware Config

Extracted

Family

gozi

Targets

    • Target

      JaffaCakes118_8340a0f26a3d98a10bdd34d0d29b17a2

    • Size

      15KB

    • MD5

      8340a0f26a3d98a10bdd34d0d29b17a2

    • SHA1

      6e4aec1957893b5ac41f681209a1fce0ecee4362

    • SHA256

      c650cd35d36243f3952b8acc66f136ca815366f6ff5be577ff6126f3e5726c21

    • SHA512

      2cf708c1c3dbada6f2e472dd45de6bed39981d1d0584361159a1fcb16afa093f652237c868437a9349e81f10178a15fa77713b441cbebfab07f50be327f72be5

    • SSDEEP

      384:e90YG11IixjvZ0HBEWqZQc8wWehuV0xYTsW9M:G0YZHmPi7wzuV0aTsr

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks