General
-
Target
01bc058c18c3c76a35cfaee25fa1f16f35f9760c1b509859c14cfc7c892c6d3a
-
Size
215KB
-
Sample
220523-wwantsdfhj
-
MD5
f5cf87cd086cb2d70cb356a94c40492a
-
SHA1
c2cd36754b330f503d2ef133bf6ef5921eb10f24
-
SHA256
01bc058c18c3c76a35cfaee25fa1f16f35f9760c1b509859c14cfc7c892c6d3a
-
SHA512
2a982ef97e2d0e01734b437670d2ddaf6ceeb63508754c13cd8064a158026b4c924889977a9871567ed3da39d8f11f132a77afdbb6c9c0b6d481ac5181b2d13c
Static task
static1
Behavioral task
behavioral1
Sample
01bc058c18c3c76a35cfaee25fa1f16f35f9760c1b509859c14cfc7c892c6d3a.exe
Resource
win7-20220414-en
Malware Config
Extracted
gozi_ifsb
-
build
215165
Extracted
gozi_ifsb
3153
biesbetiop.com
kircherche.com
toforemedi.com
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
01bc058c18c3c76a35cfaee25fa1f16f35f9760c1b509859c14cfc7c892c6d3a
-
Size
215KB
-
MD5
f5cf87cd086cb2d70cb356a94c40492a
-
SHA1
c2cd36754b330f503d2ef133bf6ef5921eb10f24
-
SHA256
01bc058c18c3c76a35cfaee25fa1f16f35f9760c1b509859c14cfc7c892c6d3a
-
SHA512
2a982ef97e2d0e01734b437670d2ddaf6ceeb63508754c13cd8064a158026b4c924889977a9871567ed3da39d8f11f132a77afdbb6c9c0b6d481ac5181b2d13c
-