General
- Target status bmp.dll
- Size 1.4MB
- Sample220222-lss1wsgdhm
- SHA256 37603cddc36ec9c8b2b6c3d6a0d1a05ee33b1df81befe404ffcc398a6acd1edb
- MD5 80973714181535b9fb854929ee8e879c
- SHA1 a71ece59f3c0875476d2ccc12a2ce39e59ef1bb3
- SHA512 0b03fc7735236d158f6dac064b84e714142e95dccb194958c4ca138d9da8f9313ec204471db1770e1456d9659aea4fc81b0587ed465701bbbaa1e5354d91e7ef
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
status bmp.dll
Resource
win7-en-20211208
0 signatures
0 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
7616
C2
-
loginsline.top
-
loginslink.top
-
linkspremium.ru
-
premiumlists.ru
Attributes
-
base_path
/drew/
-
build
250225
-
exe_type
loader
-
extension
.jlk
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target status bmp.dll
- Size 1.4MB
- SHA256 37603cddc36ec9c8b2b6c3d6a0d1a05ee33b1df81befe404ffcc398a6acd1edb
- MD5 80973714181535b9fb854929ee8e879c
- SHA1 a71ece59f3c0875476d2ccc12a2ce39e59ef1bb3
- SHA512 0b03fc7735236d158f6dac064b84e714142e95dccb194958c4ca138d9da8f9313ec204471db1770e1456d9659aea4fc81b0587ed465701bbbaa1e5354d91e7ef
- MD5 SHA1 SHA512