Overview

overview

10

Static

static

10

8a489479c5...76.dll

windows7_x64

1

8a489479c5...76.dll

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a489479c598806582f3186476614362a4b6b61ef8ead38ebb59781a36efef76

  • Size

    38KB

  • MD5

    4a1ab739ba73ebc4c56f255b8d3393ae

  • SHA1

    f5b3844af2bc9bb5584acc86192cf863a51162a1

  • SHA256

    8a489479c598806582f3186476614362a4b6b61ef8ead38ebb59781a36efef76

  • SHA512

    cf7037c0c5d48bdab465dd7be8b635e2d656f409aead1fad9d749190827022cb2f2867ed676c4e21a55125050c291876ecedab7fe2187a2ea737a6a03212ce16

  • SSDEEP

    768:oYkeGUvMIsmmTV6iX/Kkph8lxFE/JvlOIewW1wh:Se/JmIqfp4ExYeW

Score
10/10
6000gozi_ifsb

Malware Config

Extracted

Family

gozi_ifsb

Botnet

6000

C2

authd.feronok.com

app.bighomegl.at
Attributes
  • build

    250204

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 8a489479c598806582f3186476614362a4b6b61ef8ead38ebb59781a36efef76
    .dll regsvr32 windows x86

    6645a948149623e814d378b0c62a0e68


    Code Sign

    Headers

    Imports

    Exports

    Sections