General
-
Target
249d57144a6008b1a33005886cdfc8fad5f8c2e7d430e3ea339fd551a6e22ccb
-
Size
215KB
-
Sample
220611-1mecwahegp
-
MD5
43bbe5928ec056580f3dfce60360b9e2
-
SHA1
ff0566c76c47fdae6f0d37af232b3b8d1b41e92c
-
SHA256
249d57144a6008b1a33005886cdfc8fad5f8c2e7d430e3ea339fd551a6e22ccb
-
SHA512
08c75cfa4e17ef1b84d83beed49a32a174ac5cfad8a2a7d9c880d92c41c1b2357f39ae1ada31a6427f6794c410985f5bc16d777c66faef8f59dec2cb58089d75
Static task
static1
Behavioral task
behavioral1
Sample
249d57144a6008b1a33005886cdfc8fad5f8c2e7d430e3ea339fd551a6e22ccb.exe
Resource
win7-20220414-en
Malware Config
Extracted
gozi_ifsb
-
build
215165
Extracted
gozi_ifsb
3153
biesbetiop.com
kircherche.com
toforemedi.com
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
249d57144a6008b1a33005886cdfc8fad5f8c2e7d430e3ea339fd551a6e22ccb
-
Size
215KB
-
MD5
43bbe5928ec056580f3dfce60360b9e2
-
SHA1
ff0566c76c47fdae6f0d37af232b3b8d1b41e92c
-
SHA256
249d57144a6008b1a33005886cdfc8fad5f8c2e7d430e3ea339fd551a6e22ccb
-
SHA512
08c75cfa4e17ef1b84d83beed49a32a174ac5cfad8a2a7d9c880d92c41c1b2357f39ae1ada31a6427f6794c410985f5bc16d777c66faef8f59dec2cb58089d75
-