General
-
Target
b04671e37d71d5f3444e001eb72b6ade57b73147409ab0566816de12986b6185
-
Size
908KB
-
Sample
220525-abvbvacdd8
-
MD5
cf085e0bbd5d696c9a171583284814fb
-
SHA1
74a6f24f9ad158078a2b4f4afc1ec13a146ffff6
-
SHA256
b04671e37d71d5f3444e001eb72b6ade57b73147409ab0566816de12986b6185
-
SHA512
8e2256a0bf29ea016979b9f4b8e1dfd6edf093d83bef1e09ddc5bca6846a18ad8bc15eff9229774841efb7ee037248b8452ed5feaf1e586b90a1e87733bf7403
Behavioral task
behavioral1
Sample
b04671e37d71d5f3444e001eb72b6ade57b73147409ab0566816de12986b6185.exe
Resource
win7-20220414-en
Malware Config
Extracted
gozi_rm3
-
build
300854
Extracted
gozi_rm3
202004141
https://devicelease.xyz
-
build
300854
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
-
url_path
index.htm
Targets
-
-
Target
b04671e37d71d5f3444e001eb72b6ade57b73147409ab0566816de12986b6185
-
Size
908KB
-
MD5
cf085e0bbd5d696c9a171583284814fb
-
SHA1
74a6f24f9ad158078a2b4f4afc1ec13a146ffff6
-
SHA256
b04671e37d71d5f3444e001eb72b6ade57b73147409ab0566816de12986b6185
-
SHA512
8e2256a0bf29ea016979b9f4b8e1dfd6edf093d83bef1e09ddc5bca6846a18ad8bc15eff9229774841efb7ee037248b8452ed5feaf1e586b90a1e87733bf7403
-