General
-
Target
62ba0fc2c6b17854c89aec29308f3df5db06f2e40f807584f48e7d3a9c0394dc
-
Size
39KB
-
Sample
220201-mac3dscfhk
-
MD5
9af0c1b1b2b7882d9f14056202b5450e
-
SHA1
36076c3d4d837d58d10ec2128b9e2b91535a05ba
-
SHA256
62ba0fc2c6b17854c89aec29308f3df5db06f2e40f807584f48e7d3a9c0394dc
-
SHA512
4af8310176bfe31c63d0536a391ae9d26019d0214f5bfab6c9d67edb296f8e6fd52726079c25a73fc9cb9488ac88a41dde25c1741eadd9ba3a6790ae628614c1
Behavioral task
behavioral1
Sample
62ba0fc2c6b17854c89aec29308f3df5db06f2e40f807584f48e7d3a9c0394dc.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
62ba0fc2c6b17854c89aec29308f3df5db06f2e40f807584f48e7d3a9c0394dc.dll
Resource
win10v2004-en-20220112
Malware Config
Extracted
gozi_ifsb
4500
app3.maintorna.com
chat.billionady.com
app5.folion.xyz
wer.defone.click
-
build
250188
-
exe_type
loader
-
server_id
580
Targets
-
-
Target
62ba0fc2c6b17854c89aec29308f3df5db06f2e40f807584f48e7d3a9c0394dc
-
Size
39KB
-
MD5
9af0c1b1b2b7882d9f14056202b5450e
-
SHA1
36076c3d4d837d58d10ec2128b9e2b91535a05ba
-
SHA256
62ba0fc2c6b17854c89aec29308f3df5db06f2e40f807584f48e7d3a9c0394dc
-
SHA512
4af8310176bfe31c63d0536a391ae9d26019d0214f5bfab6c9d67edb296f8e6fd52726079c25a73fc9cb9488ac88a41dde25c1741eadd9ba3a6790ae628614c1
Score8/10-
Sets service image path in registry
-