General
- Target 11410000.dll
- Size 256KB
- Sample220328-qech7sabe3
- SHA256 aa4fbdc5ce627bba27969922f443d27eb4c3d1937dfb28cc422f9352905ce448
- MD5 365a3238fe4dbc2649a8758aa810aa2f
- SHA1 7011e00c67e3909600fe7e542533dd8a2a62b9e2
- SHA512 9623b784475a91fa4c7b9ba0e681f46260ee434b86e83729e27133de220c050ec9b9758cc5a90bf7d6aa3a49a2b02798c3120079eda93f59477ef34c44d31d2d
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
11410000.dll
Resource
win7-20220311-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
11410000.dll
Resource
win10v2004-en-20220113
0 signatures
0 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
3000
C2
-
config.edge.skype.com
-
185.154.53.58
-
cabrioxmdes.at
-
hopexmder.net
-
185.154.53.49
-
193.56.146.189
Attributes
-
base_path
/images/
-
exe_type
worker
-
extension
.jlk
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target 11410000.dll
- Size 256KB
- SHA256 aa4fbdc5ce627bba27969922f443d27eb4c3d1937dfb28cc422f9352905ce448
- MD5 365a3238fe4dbc2649a8758aa810aa2f
- SHA1 7011e00c67e3909600fe7e542533dd8a2a62b9e2
- SHA512 9623b784475a91fa4c7b9ba0e681f46260ee434b86e83729e27133de220c050ec9b9758cc5a90bf7d6aa3a49a2b02798c3120079eda93f59477ef34c44d31d2d
- MD5 SHA1 SHA512
Score1/10