Overview

overview

10

Static

static

3

jaffacakes...hl.exe

windows10-2004-x64

10

jaffacakes...hl.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_Trojan-Spy.Win32.Ursnif.yhl.59efd009a993e2e1011cedab876039b1
  • Size 429KB
  • Sample261018-267zzaat2q
  • SHA256 141cb223a3af9149b880b23071743901f319e56384cf9f8f87eb1b749723b55c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
gozibankerdiscoveryisfbtrojan

Malware Config

Extracted

Family

  • gozi

Targets

    • Target
      jaffacakes118_Trojan-Spy.Win32.Ursnif.yhl.59efd009a993e2e1011cedab876039b1
    • Size 429KB
    • SHA256 141cb223a3af9149b880b23071743901f319e56384cf9f8f87eb1b749723b55c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    bankerdiscoverygoziisfbtrojan

    • Family: Gozi

      Gozi is a well-known and widely distributed banking trojan.

      bankertrojangozi

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks