Overview

overview

10

Static

static

10

a3412d5e43...0e.dll

windows7_x64

1

a3412d5e43...0e.dll

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a3412d5e4378379ff6c48dc87652e2400b74e72b99bb2fad2498d21e4213010e

  • Size

    52KB

  • MD5

    ff93684e156bb2a37e9615f9df7311d9

  • SHA1

    67d862a7b7f4e3cd411dd9becb1d64190d6c5c48

  • SHA256

    a3412d5e4378379ff6c48dc87652e2400b74e72b99bb2fad2498d21e4213010e

  • SHA512

    92b9af32f167fd9fc214a07a7b541c405c8fb0bbe771c485ce45a87b45c6c3c24be401878fe77821ed3afca6ff10c956e9ed36f04342054cd1098aef11485569

  • SSDEEP

    768:5misMvCe86M3n0pgaAIIbNh8dXf1Fojg65eF6N1ew:57scQ0pgaNiL8dXfH6Sc1e

Score
10/10
1500gozi_ifsb

Malware Config

Extracted

Family

gozi_ifsb

Botnet

1500

C2

authd.feronok.com

app.bighomegl.at
Attributes
  • build

    250204

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.plain
aes.plain

Signatures

Files

  • a3412d5e4378379ff6c48dc87652e2400b74e72b99bb2fad2498d21e4213010e
    .dll regsvr32 windows x86

    6645a948149623e814d378b0c62a0e68


    Code Sign

    Headers

    Imports

    Exports

    Sections