General
-
Target
8bfcbd3133e8681e948c36d2e335b3c4d7698aa6fcc9a2683204067ee46d4390
-
Size
42KB
-
Sample
220201-lwjavsdad3
-
MD5
fadb5392e4db2ebc381aece3b9458cdd
-
SHA1
9fd30fdd70d91fb9f2ff43da92e30c3aa787aa42
-
SHA256
8bfcbd3133e8681e948c36d2e335b3c4d7698aa6fcc9a2683204067ee46d4390
-
SHA512
bc3b649d6ab7b8549159f4d67a9d5746baad26a564e324ef138be043eaf14083f16d1b530e3cbb905fddbe893b96fcdceb3f7163b04e25dfa8e2fcd4d466b659
Behavioral task
behavioral1
Sample
8bfcbd3133e8681e948c36d2e335b3c4d7698aa6fcc9a2683204067ee46d4390.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
8bfcbd3133e8681e948c36d2e335b3c4d7698aa6fcc9a2683204067ee46d4390.dll
Resource
win10v2004-en-20220113
Malware Config
Extracted
gozi_ifsb
8877
outlook.com
auredosite.club
vuredosite.club
-
base_path
/grower/
-
build
250206
-
dga_season
10
-
exe_type
loader
-
extension
.grow
-
server_id
12
Targets
-
-
Target
8bfcbd3133e8681e948c36d2e335b3c4d7698aa6fcc9a2683204067ee46d4390
-
Size
42KB
-
MD5
fadb5392e4db2ebc381aece3b9458cdd
-
SHA1
9fd30fdd70d91fb9f2ff43da92e30c3aa787aa42
-
SHA256
8bfcbd3133e8681e948c36d2e335b3c4d7698aa6fcc9a2683204067ee46d4390
-
SHA512
bc3b649d6ab7b8549159f4d67a9d5746baad26a564e324ef138be043eaf14083f16d1b530e3cbb905fddbe893b96fcdceb3f7163b04e25dfa8e2fcd4d466b659
Score8/10-
Sets service image path in registry
-