General
-
Target
0f636ca98aab74539b06036f03e10f69d658803a3f180b8f5897e972aa626102
-
Size
109KB
-
Sample
220201-m1cjjsdff9
-
MD5
d04d2a5f304cc7a6c3583e65c4cefead
-
SHA1
b58c136b8ca58a4f3dbfd72154756dfd041d1315
-
SHA256
0f636ca98aab74539b06036f03e10f69d658803a3f180b8f5897e972aa626102
-
SHA512
62f0f2939235e4fac5c9af7ba3d686837b305714026d802a07cd6a5ce0d97f83042b5c006232dac19d4eebb7e6c8007c1ad6bb12b8d10d1ad42f2906a21d08dc
Behavioral task
behavioral1
Sample
0f636ca98aab74539b06036f03e10f69d658803a3f180b8f5897e972aa626102.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0f636ca98aab74539b06036f03e10f69d658803a3f180b8f5897e972aa626102.dll
Resource
win10v2004-en-20220112
Malware Config
Extracted
gozi_ifsb
1500
app.buboleinov.com
chat.veminiare.com
chat.billionady.com
app3.maintorna.com
-
build
250188
-
exe_type
loader
-
server_id
580
Targets
-
-
Target
0f636ca98aab74539b06036f03e10f69d658803a3f180b8f5897e972aa626102
-
Size
109KB
-
MD5
d04d2a5f304cc7a6c3583e65c4cefead
-
SHA1
b58c136b8ca58a4f3dbfd72154756dfd041d1315
-
SHA256
0f636ca98aab74539b06036f03e10f69d658803a3f180b8f5897e972aa626102
-
SHA512
62f0f2939235e4fac5c9af7ba3d686837b305714026d802a07cd6a5ce0d97f83042b5c006232dac19d4eebb7e6c8007c1ad6bb12b8d10d1ad42f2906a21d08dc
Score8/10-
Sets service image path in registry
-