General
-
Target
tmp/edee3822e8fa6df7bbf41ed1ee11b231c949789bf74c4c21113d2d69d59403ab.exe
-
Size
134KB
-
Sample
211220-k9r99aaba5
-
MD5
fdca743ac7b556bfdc3e946df96cb135
-
SHA1
297f04669ddc1bcf30b316e79602827e930eed7c
-
SHA256
edee3822e8fa6df7bbf41ed1ee11b231c949789bf74c4c21113d2d69d59403ab
-
SHA512
faa69a71e52d303d167665faec2812ebee5870d2d6668674849f2ef047f4c495f38bd9281ef803fee243e1eee5a4ef1c7e1e0f2ce8b037f311f54ebdee8a675e
Behavioral task
behavioral1
Sample
tmp/edee3822e8fa6df7bbf41ed1ee11b231c949789bf74c4c21113d2d69d59403ab.exe.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
tmp/edee3822e8fa6df7bbf41ed1ee11b231c949789bf74c4c21113d2d69d59403ab.exe.dll
Resource
win10-en-20211208
Malware Config
Extracted
gozi_ifsb
8877
outlook.com/login
gmail.com
worunekulo.club
horunekulo.website
-
base_path
/greed/
-
build
250196
-
dga_season
10
-
exe_type
loader
-
extension
.gfk
-
server_id
12
Targets
-
-
Target
tmp/edee3822e8fa6df7bbf41ed1ee11b231c949789bf74c4c21113d2d69d59403ab.exe
-
Size
134KB
-
MD5
fdca743ac7b556bfdc3e946df96cb135
-
SHA1
297f04669ddc1bcf30b316e79602827e930eed7c
-
SHA256
edee3822e8fa6df7bbf41ed1ee11b231c949789bf74c4c21113d2d69d59403ab
-
SHA512
faa69a71e52d303d167665faec2812ebee5870d2d6668674849f2ef047f4c495f38bd9281ef803fee243e1eee5a4ef1c7e1e0f2ce8b037f311f54ebdee8a675e
Score1/10 -