General

  • Target

    d3732cfb3cf320fbafcd332dcf4db90b5d306bf4e16518248a571124599e07cb

  • Size

    42KB

  • MD5

    e925c5008b817fab066c50aad00eadfb

  • SHA1

    8b160a12a9709770bdea5a527bb7d1f209c26f1a

  • SHA256

    d3732cfb3cf320fbafcd332dcf4db90b5d306bf4e16518248a571124599e07cb

  • SHA512

    3123db29fbe8a9150aa84a46a9b6cbf7e2dc5e85339facbd5d666ce4cd58e2dea0abf1aff57bd3b3023a210405c17e322e1dfead79da1693e4aec618d6b8e732

  • SSDEEP

    768:BbbzH0OPsyw2Ujn++vkubHdxDmKC15Ax+VRfRTOAOdcLj/:tRPBun+6nrdxDm1Kx+bfR6AOiLD

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

1500

C2

apt.updateffboruse.com

app.updatebrouser.com

Attributes
  • build

    250211

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.plain
aes.plain

Signatures

Files

  • d3732cfb3cf320fbafcd332dcf4db90b5d306bf4e16518248a571124599e07cb
    .dll windows x86

    5a55101162d5dd43f647d5d0d11f468d


    Code Sign

    Headers

    Imports

    Sections