DllRegisterServer
Behavioral task
behavioral1
Sample
3ce9df2272bb98916f215be5a0943ed0fc06f72eca3bed2385aacc7c1b4c6071.dll
Resource
win7-en-20211014
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
3ce9df2272bb98916f215be5a0943ed0fc06f72eca3bed2385aacc7c1b4c6071.dll
Resource
win10-en-20211014
windows10_x64
0 signatures
0 seconds
General
-
Target
3ce9df2272bb98916f215be5a0943ed0fc06f72eca3bed2385aacc7c1b4c6071
-
Size
42KB
-
MD5
f064bbc17ecabfe4d5122c24f64d1459
-
SHA1
554e022ea2b52a679da260cf3fd799e90b4fed9e
-
SHA256
3ce9df2272bb98916f215be5a0943ed0fc06f72eca3bed2385aacc7c1b4c6071
-
SHA512
73585fac40c4b2046e7612348a3f3e8a78017b069cb05893135f8619394f219efa048d9b07590598207cfa3a9c8cabc53760cb794349d458216a444e80eb817b
Malware Config
Extracted
Family
gozi_ifsb
Botnet
8899
C2
msn.com/login
vloderuniok.website
gloderuniok.website
Attributes
-
build
260212
-
dga_season
10
-
exe_type
loader
-
server_id
12
rsa_pubkey.plain
serpent.plain
Signatures
-
Gozi_ifsb family
Files
-
3ce9df2272bb98916f215be5a0943ed0fc06f72eca3bed2385aacc7c1b4c6071.dll windows x86 regsvr32
Exports
Exports