General
-
Target
gozi.payload-disk
-
Size
43KB
-
Sample
220323-f121wacccp
-
MD5
d1a3c115a2cee09715572c7ee70451b1
-
SHA1
44d4963140af2515e2884b3e8077fed446e01438
-
SHA256
4d34a7f79a78d18656167c38f4fb33d5e9a3e233e84a2238f2d0f6df208b52fa
-
SHA512
324baffb400377b53893488d1db31f28d4549b6086909e2c8f91010648cd424d7d51db4a78bdfd1286b51978e7b7c603a39828b2036c42c578c984f1f7e89ab5
Behavioral task
behavioral1
Sample
gozi.dll
Resource
win7-20220310-en
Behavioral task
behavioral2
Sample
gozi.dll
Resource
win10v2004-en-20220113
Malware Config
Extracted
gozi_ifsb
7627
vilogerta.top
linkspremium.ru
premiumlists.ru
-
base_path
/drew/
-
build
250225
-
exe_type
loader
-
extension
.jlk
-
server_id
50
Targets
-
-
Target
gozi.payload-disk
-
Size
43KB
-
MD5
d1a3c115a2cee09715572c7ee70451b1
-
SHA1
44d4963140af2515e2884b3e8077fed446e01438
-
SHA256
4d34a7f79a78d18656167c38f4fb33d5e9a3e233e84a2238f2d0f6df208b52fa
-
SHA512
324baffb400377b53893488d1db31f28d4549b6086909e2c8f91010648cd424d7d51db4a78bdfd1286b51978e7b7c603a39828b2036c42c578c984f1f7e89ab5
Score1/10 -