General
-
Target
90a75fcaa0c8da7865da027c84793cdfdef64d26d3ac7172ea8bbce2e63f4c15
-
Size
146KB
-
Sample
220201-ltke5sdaa9
-
MD5
9b14a37463b58a73d05d34adf8003ef7
-
SHA1
71b3581a17acc5112c4a9fcc9957ca0bdd54ab8a
-
SHA256
90a75fcaa0c8da7865da027c84793cdfdef64d26d3ac7172ea8bbce2e63f4c15
-
SHA512
462bb96e9359e4dec8814ec8ec8d6f96cc56f6804c488eb26a7e183e22d56f9fa97705e6ac3dba7cf9dee30da1e3326aef31be1087ba805bfe3dd77f6ba038c9
Behavioral task
behavioral1
Sample
90a75fcaa0c8da7865da027c84793cdfdef64d26d3ac7172ea8bbce2e63f4c15.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
90a75fcaa0c8da7865da027c84793cdfdef64d26d3ac7172ea8bbce2e63f4c15.dll
Resource
win10v2004-en-20220112
Malware Config
Extracted
gozi_ifsb
1010
supportsstats.com/geodata/version/ip2ext
neteworkgroup.com/geodata/version/ip2ext
highnetwork.pw/geodata/version/ip2ext
lostnetwork.in/geodata/version/ip2ext
sysconnections.net/geodata/version/ip2ext
lansupports.com/geodata/version/ip2ext
-
build
212578
-
exe_type
worker
-
server_id
30
Targets
-
-
Target
90a75fcaa0c8da7865da027c84793cdfdef64d26d3ac7172ea8bbce2e63f4c15
-
Size
146KB
-
MD5
9b14a37463b58a73d05d34adf8003ef7
-
SHA1
71b3581a17acc5112c4a9fcc9957ca0bdd54ab8a
-
SHA256
90a75fcaa0c8da7865da027c84793cdfdef64d26d3ac7172ea8bbce2e63f4c15
-
SHA512
462bb96e9359e4dec8814ec8ec8d6f96cc56f6804c488eb26a7e183e22d56f9fa97705e6ac3dba7cf9dee30da1e3326aef31be1087ba805bfe3dd77f6ba038c9
Score10/10-
Sets service image path in registry
-