General
- Target footer.jpg.dll
- Size 286KB
- Sample210210-1m263rm71e
- SHA256 8df914f790a6e5eb07042cce36ea9a23e23cdc1610d930f306f9ef55b6d8a2c5
- MD5 9df5fcca1aadec6333301aca7a13c481
- SHA1 f3445c636e0a702eff7782b9e8eeb4ca84f842ff
- SHA512 c1bb8d9ce6f014cc6c1dd68e767c03bbc4d56875f792d2f994f5740ad2d23ab75d3caa9b9d9778fab903685db4f87c1b999756e5b3a971dec1a405cad5ac17ad
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
footer.jpg.dll
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
7251
C2
-
web.vortex.data.microsoft.com
-
ocsp.sca1b.amazontrust.com
-
nerowins.com
Attributes
-
build
250177
-
dns_servers
107.174.86.134
107.175.127.22
-
exe_type
loader
rsa_pubkey.base64
serpent.plain
Targets
-
- Target footer.jpg.dll
- Size 286KB
- SHA256 8df914f790a6e5eb07042cce36ea9a23e23cdc1610d930f306f9ef55b6d8a2c5
- MD5 9df5fcca1aadec6333301aca7a13c481
- SHA1 f3445c636e0a702eff7782b9e8eeb4ca84f842ff
- SHA512 c1bb8d9ce6f014cc6c1dd68e767c03bbc4d56875f792d2f994f5740ad2d23ab75d3caa9b9d9778fab903685db4f87c1b999756e5b3a971dec1a405cad5ac17ad
- MD5 SHA1 SHA512