Overview

overview

10

Static

static

10

23251d9890...ec.dll

windows7_x64

3

23251d9890...ec.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23251d989078d7d69c6cfe6de3c9f2102d5810266fc483e11e0c71ab000000ec

  • Size

    222KB

  • MD5

    4cc0ab0723d94bf572c33ac7af89edba

  • SHA1

    657f84c00323f99128856df23ea593d13addfbd5

  • SHA256

    23251d989078d7d69c6cfe6de3c9f2102d5810266fc483e11e0c71ab000000ec

  • SHA512

    8fdb7055e2098fc7ae814921d7128c215bf803a0ec1beb51b4d8ce6982a14aacf405cd3d3ff206a9a9834686eea147ad5251f4adcee065cdb9b9808d76570be2

  • SSDEEP

    6144:nUQaZVS84Q1XdY2lZXuSqm932164T8jS:npaZVS85tBZXvpF21R

Score
10/10
8877gozi_ifsb

Malware Config

Extracted

Family

gozi_ifsb

Botnet

8877

C2

microsoft.com/blog

195.123.213.53

185.186.244.85

185.186.246.32

dsakdjehrjwekrew.website

dasdfrjnkrnfjkwerrwe.website
Attributes
  • base_path

    /images/

  • dga_season

    10

  • dns_servers

    107.174.86.134

    107.175.127.22

  • exe_type

    worker

  • extension

    .avi

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Signatures

Files

  • 23251d989078d7d69c6cfe6de3c9f2102d5810266fc483e11e0c71ab000000ec
    .dll windows x64

    902fc2df815040dcf720d3bc4f7433f7


    Code Sign

    Headers

    Imports

    Sections