General

  • Target

    09a9043681c5eb5e79e974a51f0f03edb4b09db7a916c146a97fb501896350b9

  • Size

    52KB

  • MD5

    7159b4111de1095b1c0bb07e201e43c1

  • SHA1

    1240614f5241e1383320900382695e8d211f3383

  • SHA256

    09a9043681c5eb5e79e974a51f0f03edb4b09db7a916c146a97fb501896350b9

  • SHA512

    39f73611213b118bcd52d385bd94324ec6b66dc5d711ef4c52fc865cf3cf0f946400a04368e506d0edd2a1e4749312b0cf745783df93ceb3f032cf65d8504341

  • SSDEEP

    768:uhU/fM7rcvgtWjVK0VlGudcmjVjCHkatBLlod74IK8G5+A4Y:Lf8NkjVnVlHdc2VjWkwhUlKd+TY

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

1500

C2

gtr.antoinfer.com

app.bighomegl.at

Attributes
  • build

    250211

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 09a9043681c5eb5e79e974a51f0f03edb4b09db7a916c146a97fb501896350b9
    .dll windows x86


    Code Sign

    Headers

    Sections