General
-
Target
e820efb91acb26da9d63723b701387b1e46dc0916800b0eb2b6aa697d5ee2eff
-
Size
114KB
-
Sample
220201-kvf9fabgdq
-
MD5
64030e5b8541e2f391b3e4bdafe6fde2
-
SHA1
f24e4df0107464c28b62352491ee09afab09900c
-
SHA256
e820efb91acb26da9d63723b701387b1e46dc0916800b0eb2b6aa697d5ee2eff
-
SHA512
377f8727cdb4c8804dbfc99fed4862927176417b828d70de9aa5ed140d199f39b8bbf6a7221c11cfdd6c5eae153b705ee8cb31d2129885c46b8b602d52ceda53
Behavioral task
behavioral1
Sample
e820efb91acb26da9d63723b701387b1e46dc0916800b0eb2b6aa697d5ee2eff.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
e820efb91acb26da9d63723b701387b1e46dc0916800b0eb2b6aa697d5ee2eff.dll
Resource
win10v2004-en-20220113
Malware Config
Extracted
gozi_ifsb
8877
outlook.com/login
gmail.com
dorelunonu.us
morelunonu.us
-
base_path
/greed/
-
build
250195
-
dga_season
10
-
exe_type
loader
-
extension
.gfk
-
server_id
12
Targets
-
-
Target
e820efb91acb26da9d63723b701387b1e46dc0916800b0eb2b6aa697d5ee2eff
-
Size
114KB
-
MD5
64030e5b8541e2f391b3e4bdafe6fde2
-
SHA1
f24e4df0107464c28b62352491ee09afab09900c
-
SHA256
e820efb91acb26da9d63723b701387b1e46dc0916800b0eb2b6aa697d5ee2eff
-
SHA512
377f8727cdb4c8804dbfc99fed4862927176417b828d70de9aa5ed140d199f39b8bbf6a7221c11cfdd6c5eae153b705ee8cb31d2129885c46b8b602d52ceda53
Score8/10-
Sets service image path in registry
-