gozi_ifsb | 1652-56-0x0000000000160000-0x000000000016E000-memory[.]dmp

General

Target
1652-56-0x0000000000160000-0x000000000016E000-memory.dmp
Size 56KB
Sample220323-csrcmadhg4
SHA256 40a78495d842f1f74502318cebe8cc5551a80b7d1f947b6ddba2b27e839eaed0
MD5 de066a81a5888119f7074d7f3fcde32a
SHA1 0da1a543e1906f621d17835d73d84e1ea92dac43
SHA512 c9925558f41f15c5c65fe5324c4ecdee4295f25192ef3ac556477a06e22de50f037c585ffe645d536cde746f62cc553be4b63c85b174b0a3592c27565f84a7af
MD5 SHA1 SHA512

Score

10^/10

7626 gozi_ifsb

Family

Botnet

C2

Attributes

rsa_pubkey.plain

aes.plain

SHA256 40a78495d842f1f74502318cebe8cc5551a80b7d1f947b6ddba2b27e839eaed0
MD5 de066a81a5888119f7074d7f3fcde32a
SHA1 0da1a543e1906f621d17835d73d84e1ea92dac43
SHA512 c9925558f41f15c5c65fe5324c4ecdee4295f25192ef3ac556477a06e22de50f037c585ffe645d536cde746f62cc553be4b63c85b174b0a3592c27565f84a7af
MD5 SHA1 SHA512

windows x86

Minor OS version

Major OS version

Entry point

5458

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths