General
- Target 61a60b201df7d.dll
- Size 42KB
- Sample211130-nmpsdshhd5
- SHA256 a6f0ad440063e4aab5a6eab256ead56e4cd9594bc34dcdb273d89dca0f7032d1
- MD5 2bd6e4dddd6dfd7fe24514576f47068c
- SHA1 588cc4fea13fe49d361468dac070e8c2da615e12
- SHA512 4a5a1434ffed65c604fa4b401edbdb33a9cfd2fdf0229ea8cd8db9b6d1c82203f4bb48248c2c90b5eb76a9eb886830780bb80060d0d1bd3fdb93f258346bfaf0
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
61a60b201df7d.dll
Resource
win7-en-20211014
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
61a60b201df7d.dll
Resource
win10-en-20211104
0 signatures
0 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
8899
C2
-
microsoft.com/windowsdisabler
-
bvolebukoneh.site
-
karfaganda.com
Attributes
-
build
260216
-
dga_season
10
-
exe_type
loader
-
server_id
12
rsa_pubkey.plain
serpent.plain
Targets
-
- Target 61a60b201df7d.dll
- Size 42KB
- SHA256 a6f0ad440063e4aab5a6eab256ead56e4cd9594bc34dcdb273d89dca0f7032d1
- MD5 2bd6e4dddd6dfd7fe24514576f47068c
- SHA1 588cc4fea13fe49d361468dac070e8c2da615e12
- SHA512 4a5a1434ffed65c604fa4b401edbdb33a9cfd2fdf0229ea8cd8db9b6d1c82203f4bb48248c2c90b5eb76a9eb886830780bb80060d0d1bd3fdb93f258346bfaf0
- MD5 SHA1 SHA512
Score1/10