Overview

overview

10

Static

static

10

82f92ef356...7e.dll

windows7_x64

1

82f92ef356...7e.dll

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    82f92ef35694c5a0767f069937181bb4d033014491a7a0b63c73396cc0c2277e

  • Size

    56KB

  • MD5

    0ad9430dd3f572de8cd0ca5a8abc37c0

  • SHA1

    fbb27806ed07da6acf8703494acc1da93aac08b9

  • SHA256

    82f92ef35694c5a0767f069937181bb4d033014491a7a0b63c73396cc0c2277e

  • SHA512

    6c6fda252eb50a62c79c73b20daaa13ef77325980eef1971fa7d2b6e0c303eee59346f63908377f3d3d921a8a22682b11016d628d695bb148a7a05109ff4db62

  • SSDEEP

    1536:b+qwRoWyB54fT6CvV/9Yh+T9cb6f1BoF/X:bVwhy4T6C9Vm96fYFv

Score
10/10
4500gozi_ifsb

Malware Config

Extracted

Family

gozi_ifsb

Botnet

4500

C2

authd.feronok.com

raw.pablowilliano.at
Attributes
  • build

    250188

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 82f92ef35694c5a0767f069937181bb4d033014491a7a0b63c73396cc0c2277e
    .dll regsvr32 windows x86

    6645a948149623e814d378b0c62a0e68


    Code Sign

    Headers

    Imports

    Exports

    Sections