Overview

overview

10

Static

static

10

b4966efca7...0e.exe

windows7_x64

1

b4966efca7...0e.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4966efca7172b4236468b47735f1de8a44b094eb9ac6101cb4ca84cf128400e

  • Size

    41KB

  • MD5

    1bbb719ff6dfa35fc4fc297ef873228b

  • SHA1

    a5f856ae20dd7d84484b4b62c9e1898f833f0f28

  • SHA256

    b4966efca7172b4236468b47735f1de8a44b094eb9ac6101cb4ca84cf128400e

  • SHA512

    58a5ed179dc9cc2926a45fe093ea9c0af1ef3bb3778ebfb1506063fd0aec0df10099f3aa06c7abff0da49b91d3df94d7f0f81dc6ef01f4385c096e8cc72cfbc9

  • SSDEEP

    768:teqfz50LIYJ63060X+7Ksenq/En6QwO/ese2YXqyb76y7B8I5bF7gGNXu5WGM:EueUYJ63060XBGE6QwO/ysyp/bFpNe5

Score
10/10
8899gozi_ifsb

Malware Config

Extracted

Family

gozi_ifsb

Botnet

8899

C2

microsoft.com/windowsdisabler

windows.update3.com

grmalo.site
Attributes
  • base_path

    /kraus/

  • build

    260222

  • dga_season

    10

  • exe_type

    loader

  • extension

    .jpe

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Signatures

Files

  • b4966efca7172b4236468b47735f1de8a44b094eb9ac6101cb4ca84cf128400e
    .exe windows x86

    3db7daa96a4490937ecdb72efbba8c76


    Code Sign

    Headers

    Imports

    Sections