Overview

overview

1

Static

static

10

gozi.dll

windows7_x64

1

gozi.dll

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    gozi.payload-disk

  • Size

    43KB

  • MD5

    c72e3eba124896e10bd8acc54b1565fe

  • SHA1

    d19dd19fae7d61293e1879034b8a784f694b76e9

  • SHA256

    44b62bc022a43cfa60975be021a4f4d34caead61d23f2a925b7b470899b0195e

  • SHA512

    92929eafa1b48b79cbe00a65c7cd82d65261bc472cd2c5f0941bbb2c76a3721de9d0090c6053b9f53ed193a2b3fe9b9ce7406d0781ae52c3985898a318f68595

  • SSDEEP

    768:FRtKa9J343PPTIKyA+vgOZVGdX6Ib2HJQOJPP67g4gjpeprAk:VKa9JI/bI7YOZcJb2pQOJH67ENcrb

Score
10/10
20000gozi_ifsb

Malware Config

Extracted

Family

gozi_ifsb

Botnet

20000

C2

skype.com/signin

143.198.56.58
Attributes
  • base_path

    /peer/

  • build

    250225

  • exe_type

    loader

  • extension

    .prv

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • gozi.payload-disk
    .dll windows x86

    0d41e840891676bdaee3e54973cf5a69


    Code Sign

    Headers

    Imports

    Sections