General
-
Target
glcheck.dll
-
Size
43KB
-
Sample
220629-s7h8kaagan
-
MD5
ababce15b20848b530dfdd65c001d0e3
-
SHA1
72c917b56b11635f2b8f2996a48301cab251b78e
-
SHA256
1776f6da8c520fd5753480ed1900040cffaa86edf51220b6b7c45af74c9514ce
-
SHA512
920a155394dfecdd83418a0ea6285456d2148f7ca3bc406feb10ea5e0af79e6cf736e0980b319f0b37a4dca2b5949863cfe2c833377d799695b5bb445134d18a
Score
10/10
Malware Config
Extracted
Family
gozi_ifsb
Botnet
3000
C2
config.edge.skype.com
194.76.225.112
194.76.225.113
46.21.153.203
Attributes
-
base_path
/drew/
-
build
250239
-
exe_type
loader
-
extension
.jlk
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
-
Target
glcheck.dll
-
Size
43KB
-
MD5
ababce15b20848b530dfdd65c001d0e3
-
SHA1
72c917b56b11635f2b8f2996a48301cab251b78e
-
SHA256
1776f6da8c520fd5753480ed1900040cffaa86edf51220b6b7c45af74c9514ce
-
SHA512
920a155394dfecdd83418a0ea6285456d2148f7ca3bc406feb10ea5e0af79e6cf736e0980b319f0b37a4dca2b5949863cfe2c833377d799695b5bb445134d18a
Score1/10 -