General
- Target readme.exe
- Size 457KB
- Sample220321-js9mjaadhj
- SHA256 7cbb379e78c7c547cfd1957ccaa0be899cb97df3d001605c9bd51cd70d975886
- MD5 b7419ae99bdf4bb0d53ac560e308565e
- SHA1 f143fb4f0b339fecff40838b43a645fc0b056c5a
- SHA512 5940a1ee8755021233d401e571180f43e6eee0fc14dc4c486394838789482dcac565f9c8c40a3375b1fa3e7717c83705bac776540d8f045ec867b7a24d3ea4c0
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
readme.dll
Resource
win7-20220311-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
readme.dll
Resource
win10v2004-en-20220113
0 signatures
0 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
7625
C2
-
sistemliner.top
-
linkspremium.ru
-
premiumlists.ru
Attributes
-
base_path
/drew/
-
build
250225
-
exe_type
loader
-
extension
.jlk
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target readme.exe
- Size 457KB
- SHA256 7cbb379e78c7c547cfd1957ccaa0be899cb97df3d001605c9bd51cd70d975886
- MD5 b7419ae99bdf4bb0d53ac560e308565e
- SHA1 f143fb4f0b339fecff40838b43a645fc0b056c5a
- SHA512 5940a1ee8755021233d401e571180f43e6eee0fc14dc4c486394838789482dcac565f9c8c40a3375b1fa3e7717c83705bac776540d8f045ec867b7a24d3ea4c0
- MD5 SHA1 SHA512