General
-
Target
9134304bf1e2837913d65f8bf249c5461687c449547f7b34134487190f6a5501
-
Size
908KB
-
Sample
220520-hj4jgshedl
-
MD5
9a29825049e7b690cd4e2d90435c89ab
-
SHA1
b0fc64659f945351f630035a5478f8f568204976
-
SHA256
9134304bf1e2837913d65f8bf249c5461687c449547f7b34134487190f6a5501
-
SHA512
0543c611947f6b034197248de8551e2fa81aeb2caf5f009ca1efa8c94ac3f097d4910b9b63bcdde2b15ff9874f1b8bf816ed70305aec92179e3c8fd84d540ec3
Behavioral task
behavioral1
Sample
9134304bf1e2837913d65f8bf249c5461687c449547f7b34134487190f6a5501.exe
Resource
win7-20220414-en
Malware Config
Extracted
gozi_rm3
-
build
300854
Extracted
gozi_rm3
202004141
https://devicelease.xyz
-
build
300854
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
-
url_path
index.htm
Targets
-
-
Target
9134304bf1e2837913d65f8bf249c5461687c449547f7b34134487190f6a5501
-
Size
908KB
-
MD5
9a29825049e7b690cd4e2d90435c89ab
-
SHA1
b0fc64659f945351f630035a5478f8f568204976
-
SHA256
9134304bf1e2837913d65f8bf249c5461687c449547f7b34134487190f6a5501
-
SHA512
0543c611947f6b034197248de8551e2fa81aeb2caf5f009ca1efa8c94ac3f097d4910b9b63bcdde2b15ff9874f1b8bf816ed70305aec92179e3c8fd84d540ec3
-