General
-
Target
ff4c5c1ded00862dc1efeb6079673a84d6bc69297380c4c30e36b77838481fa2
-
Size
908KB
-
Sample
220520-hh83ksedh7
-
MD5
0826073b5d17690ab7eb236159c9c3ea
-
SHA1
bcf6d4ee6d5d4b2fe3ab26ed7ff45e45a815b91f
-
SHA256
ff4c5c1ded00862dc1efeb6079673a84d6bc69297380c4c30e36b77838481fa2
-
SHA512
77a60b1455e474f4b1c541f3298ab91928d8c3eb915f807df49743ac3fae185e92fc803e6b689c325920ca1d7b4782119b37054a9a42eb6bd9c57a17fa9dd203
Behavioral task
behavioral1
Sample
ff4c5c1ded00862dc1efeb6079673a84d6bc69297380c4c30e36b77838481fa2.exe
Resource
win7-20220414-en
Malware Config
Extracted
gozi_rm3
-
build
300854
Extracted
gozi_rm3
202004141
https://devicelease.xyz
-
build
300854
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
-
url_path
index.htm
Targets
-
-
Target
ff4c5c1ded00862dc1efeb6079673a84d6bc69297380c4c30e36b77838481fa2
-
Size
908KB
-
MD5
0826073b5d17690ab7eb236159c9c3ea
-
SHA1
bcf6d4ee6d5d4b2fe3ab26ed7ff45e45a815b91f
-
SHA256
ff4c5c1ded00862dc1efeb6079673a84d6bc69297380c4c30e36b77838481fa2
-
SHA512
77a60b1455e474f4b1c541f3298ab91928d8c3eb915f807df49743ac3fae185e92fc803e6b689c325920ca1d7b4782119b37054a9a42eb6bd9c57a17fa9dd203
-