General
- Target 60d835d4ec5d2f47c3c60428b19baa9a3e6993e3c3375bdf7f701977cac546fe
- Size 41KB
- Sample220201-ma3m2scgam
- SHA256 60d835d4ec5d2f47c3c60428b19baa9a3e6993e3c3375bdf7f701977cac546fe
- MD5 5870a269240395320d0df03d899907d4
- SHA1 298787c454e7d17829318a53baba544e25657791
- SHA512 1b05f53a31dbd6025684ca5878902a18858bbf80dbd720da97d67c657270eb7b86c19a70b6c459e8dcbc455ac787fde9d61d6d7c469abe17b3c28fa5cf251b8e
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
60d835d4ec5d2f47c3c60428b19baa9a3e6993e3c3375bdf7f701977cac546fe.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
60d835d4ec5d2f47c3c60428b19baa9a3e6993e3c3375bdf7f701977cac546fe.exe
Resource
win10v2004-en-20220112
0 signatures
0 seconds
Malware Config
Extracted
Family
-
gozi_rm3
Attributes
-
build
300981
Extracted
Family
-
gozi_rm3
Botnet
-
202108021
C2
-
https://haverit.xyz
Attributes
-
build
300981
-
exe_type
loader
-
non_target_locale
RU
-
server_id
12
-
url_path
index.htm
rsa_pubkey.plain
aes.plain
Targets
-
- Target 60d835d4ec5d2f47c3c60428b19baa9a3e6993e3c3375bdf7f701977cac546fe
- Size 41KB
- SHA256 60d835d4ec5d2f47c3c60428b19baa9a3e6993e3c3375bdf7f701977cac546fe
- MD5 5870a269240395320d0df03d899907d4
- SHA1 298787c454e7d17829318a53baba544e25657791
- SHA512 1b05f53a31dbd6025684ca5878902a18858bbf80dbd720da97d67c657270eb7b86c19a70b6c459e8dcbc455ac787fde9d61d6d7c469abe17b3c28fa5cf251b8e
- MD5 SHA1 SHA512
Score10/10Sets service image path in registry