General
-
Target
0da234ea41d04c041d0c331c951a31389cdb204c0291c4c9c72e9ebed66492d9
-
Size
43KB
-
Sample
220201-m1w8ysdcdj
-
MD5
df451ef06bce72162579e39cf84f6b29
-
SHA1
925f6b18adc961b2a27aa35b0fc24ef565b55cd0
-
SHA256
0da234ea41d04c041d0c331c951a31389cdb204c0291c4c9c72e9ebed66492d9
-
SHA512
4f198443c82842204f21fc6646e4d0a203afbf999b24e4cb19eaee29d969b31cfd5e3af698ab4831528f4dc0865f7f028e28c3094c625056036f72a54cb9633d
Behavioral task
behavioral1
Sample
0da234ea41d04c041d0c331c951a31389cdb204c0291c4c9c72e9ebed66492d9.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0da234ea41d04c041d0c331c951a31389cdb204c0291c4c9c72e9ebed66492d9.dll
Resource
win10v2004-en-20220112
Malware Config
Extracted
gozi_ifsb
1100
api10.laptok.at/api1
golang.feel500.at/api1
go.in100k.at/api1
-
build
250180
-
exe_type
loader
-
server_id
730
Targets
-
-
Target
0da234ea41d04c041d0c331c951a31389cdb204c0291c4c9c72e9ebed66492d9
-
Size
43KB
-
MD5
df451ef06bce72162579e39cf84f6b29
-
SHA1
925f6b18adc961b2a27aa35b0fc24ef565b55cd0
-
SHA256
0da234ea41d04c041d0c331c951a31389cdb204c0291c4c9c72e9ebed66492d9
-
SHA512
4f198443c82842204f21fc6646e4d0a203afbf999b24e4cb19eaee29d969b31cfd5e3af698ab4831528f4dc0865f7f028e28c3094c625056036f72a54cb9633d
Score8/10-
Sets service image path in registry
-