General
- Target readme.dll
- Size 326KB
- Sample220301-j2tmnshbc3
- SHA256 e13a056f1ba8250d266ea3e3b6790d142b92d7febb256af5f922bd2cec603e05
- MD5 b642698152333b7233f9cf3bb3e76e33
- SHA1 718f1aee1dfbbf675297b0f8a49bf0e4e2499c36
- SHA512 dd7715e8ebab4025015577ddedaeea50b7ca4b4652c8b264974c6e65892b72e742c465a6c3fc9be214d46840bc662f6390539f12b4a257ae8491009c10ba4469
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
readme.exe
Resource
win7-en-20211208
0 signatures
0 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
7620
C2
-
statilink.top
-
linkspremium.ru
-
premiumlists.ru
Attributes
-
base_path
/drew/
-
build
250225
-
exe_type
loader
-
extension
.jlk
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target readme.dll
- Size 326KB
- SHA256 e13a056f1ba8250d266ea3e3b6790d142b92d7febb256af5f922bd2cec603e05
- MD5 b642698152333b7233f9cf3bb3e76e33
- SHA1 718f1aee1dfbbf675297b0f8a49bf0e4e2499c36
- SHA512 dd7715e8ebab4025015577ddedaeea50b7ca4b4652c8b264974c6e65892b72e742c465a6c3fc9be214d46840bc662f6390539f12b4a257ae8491009c10ba4469
- MD5 SHA1 SHA512