General
-
Target
580-57-0x0000000074FF0000-0x0000000075129000-memory.dmp
-
Size
1.2MB
-
Sample
220315-qgl6esdbhq
-
MD5
68b08ed5d734e23158414f6ffaefb773
-
SHA1
8e0023ad71c7cf98995e828d173994733803d8ac
-
SHA256
aeb5330deeea4bc417947949baa7955e4e90d5105e73c2f99c82fb69d55582ff
-
SHA512
cd5092495c25f51c255e526ed1e299fc6704a66d7b513a28eeb4a6d9af29b81b96f7660f6d43410ce0dc3924f3d3960de27ef45a826d6c516b9e3e48a33bb9c0
Behavioral task
behavioral1
Sample
580-57-0x0000000074FF0000-0x0000000075129000-memory.dll
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
580-57-0x0000000074FF0000-0x0000000075129000-memory.dll
Resource
win10v2004-en-20220113
Malware Config
Extracted
gozi_ifsb
7623
atmosphera.top
linkspremium.ru
premiumlists.ru
-
base_path
/drew/
-
build
250225
-
exe_type
loader
-
extension
.jlk
-
server_id
50
Targets
-
-
Target
580-57-0x0000000074FF0000-0x0000000075129000-memory.dmp
-
Size
1.2MB
-
MD5
68b08ed5d734e23158414f6ffaefb773
-
SHA1
8e0023ad71c7cf98995e828d173994733803d8ac
-
SHA256
aeb5330deeea4bc417947949baa7955e4e90d5105e73c2f99c82fb69d55582ff
-
SHA512
cd5092495c25f51c255e526ed1e299fc6704a66d7b513a28eeb4a6d9af29b81b96f7660f6d43410ce0dc3924f3d3960de27ef45a826d6c516b9e3e48a33bb9c0
Score3/10 -