General
- Target 862e22c2c3fad4741c689f93686cec6d
- Size 428KB
- Sample220629-ldmkkaaba3
- SHA256 539b93f7453bae7aa4bb960cdca9cf90d3b94ca64c0e90b96e4c1b150e843d84
- MD5 862e22c2c3fad4741c689f93686cec6d
- SHA1 616999ca7eea175abcea017ecd5cd219a2050da7
- SHA512 655c27ff3db5829783cac40f0651dc03c382f5eaf65c5aa770dc829125d6d3d2dc7764e583ddc43d655d66d166628413b1703fa524392c4c24d483a9d9da8e00
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
862e22c2c3fad4741c689f93686cec6d.dll
Resource
win7-20220414-en
0 signatures
0 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
3000
C2
-
config.edge.skype.com
-
194.76.225.112
-
194.76.225.113
-
46.21.153.203
Attributes
-
base_path
/drew/
-
build
250239
-
exe_type
loader
-
extension
.jlk
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target 862e22c2c3fad4741c689f93686cec6d
- Size 428KB
- SHA256 539b93f7453bae7aa4bb960cdca9cf90d3b94ca64c0e90b96e4c1b150e843d84
- MD5 862e22c2c3fad4741c689f93686cec6d
- SHA1 616999ca7eea175abcea017ecd5cd219a2050da7
- SHA512 655c27ff3db5829783cac40f0651dc03c382f5eaf65c5aa770dc829125d6d3d2dc7764e583ddc43d655d66d166628413b1703fa524392c4c24d483a9d9da8e00
- MD5 SHA1 SHA512