Analysis
-
max time kernel
31s -
max time network
13s -
platform
windows7_x64 -
resource
win7-en-20211208 -
submitted
01-02-2022 02:46
Static task
static1
Behavioral task
behavioral1
Sample
eec9887fb0a1a6157c82c1319dd32e9750d616a4dc31cdbb29b2ff75028fcf04.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
eec9887fb0a1a6157c82c1319dd32e9750d616a4dc31cdbb29b2ff75028fcf04.exe
Resource
win10v2004-en-20220113
General
-
Target
eec9887fb0a1a6157c82c1319dd32e9750d616a4dc31cdbb29b2ff75028fcf04.exe
-
Size
500KB
-
MD5
4ea313151ad65a9eb770b60fd991de63
-
SHA1
69b3e1476205aac3e8912a87bbb2095f6c9d89ab
-
SHA256
eec9887fb0a1a6157c82c1319dd32e9750d616a4dc31cdbb29b2ff75028fcf04
-
SHA512
4dea30aed504462af08e6e4c46995b27a7a478a1832ffdbb4d126f981f349b08c010b15e99e7d87e85d23c629ab76ee82e50bfd808562b2acd8937eaa4f513fa
Malware Config
Extracted
gozi_ifsb
-
build
214085
Extracted
gozi_ifsb
3428
google.com
gmail.com
ztoy.top
qmiller.club
vipresleynz.com
-
build
214085
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1452-54-0x0000000000400000-0x000000000040E000-memory.dmpFilesize
56KB
-
memory/1452-55-0x0000000000400000-0x0000000000491000-memory.dmpFilesize
580KB
-
memory/1452-56-0x0000000000240000-0x000000000024F000-memory.dmpFilesize
60KB
-
memory/1452-59-0x0000000000230000-0x0000000000231000-memory.dmpFilesize
4KB