General
-
Target
3ce28d6088e225c7e600269273b38fe10d69b953dc539fcee11c67a2ed12b068
-
Size
43KB
-
Sample
220201-mk638adea3
-
MD5
fb16692a3a2ce38d6d2769c90d23c085
-
SHA1
8d16700cc28504c9528648d9e1caa4748943d8a3
-
SHA256
3ce28d6088e225c7e600269273b38fe10d69b953dc539fcee11c67a2ed12b068
-
SHA512
97659e55460621da4809e96a4f68705316c2a91e226a529f7b31b9264dbcfca75ec191a25b516529d1f9dd8a90868a3619f7a99deef34fae3f827a89c0db1af4
Behavioral task
behavioral1
Sample
3ce28d6088e225c7e600269273b38fe10d69b953dc539fcee11c67a2ed12b068.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
3ce28d6088e225c7e600269273b38fe10d69b953dc539fcee11c67a2ed12b068.dll
Resource
win10v2004-en-20220113
Malware Config
Extracted
gozi_ifsb
2200
api10.laptok.at/api1
golang.feel500.at/api1
go.in100k.at/api1
-
build
250180
-
exe_type
loader
-
server_id
730
Targets
-
-
Target
3ce28d6088e225c7e600269273b38fe10d69b953dc539fcee11c67a2ed12b068
-
Size
43KB
-
MD5
fb16692a3a2ce38d6d2769c90d23c085
-
SHA1
8d16700cc28504c9528648d9e1caa4748943d8a3
-
SHA256
3ce28d6088e225c7e600269273b38fe10d69b953dc539fcee11c67a2ed12b068
-
SHA512
97659e55460621da4809e96a4f68705316c2a91e226a529f7b31b9264dbcfca75ec191a25b516529d1f9dd8a90868a3619f7a99deef34fae3f827a89c0db1af4
Score8/10-
Sets service image path in registry
-