General
-
Target
3f6fb13462259057e08c219d56d73a41d7ecd6c5e473fe5a22b7e295003e43cc
-
Size
944KB
-
Sample
220701-bz5m6aeegq
-
MD5
fc9f55ef05485c28de81abb8e85b29b5
-
SHA1
658ec409ce325ed086281014c6574aeb7522d590
-
SHA256
3f6fb13462259057e08c219d56d73a41d7ecd6c5e473fe5a22b7e295003e43cc
-
SHA512
e8db72cf17cfa4d86ded2240a2e7f1eb6da019bb0e868d9e26cfb2903709a4456e0688d2aaa3d2eaec828f691bf0a5c71779cc3451f2fba7ab4b311171f6de3f
Static task
static1
Behavioral task
behavioral1
Sample
3f6fb13462259057e08c219d56d73a41d7ecd6c5e473fe5a22b7e295003e43cc.exe
Resource
win7-20220414-en
Malware Config
Extracted
gozi_ifsb
1000
siberponis.com
baferdifo.com
-
exe_type
worker
-
server_id
12
Targets
-
-
Target
3f6fb13462259057e08c219d56d73a41d7ecd6c5e473fe5a22b7e295003e43cc
-
Size
944KB
-
MD5
fc9f55ef05485c28de81abb8e85b29b5
-
SHA1
658ec409ce325ed086281014c6574aeb7522d590
-
SHA256
3f6fb13462259057e08c219d56d73a41d7ecd6c5e473fe5a22b7e295003e43cc
-
SHA512
e8db72cf17cfa4d86ded2240a2e7f1eb6da019bb0e868d9e26cfb2903709a4456e0688d2aaa3d2eaec828f691bf0a5c71779cc3451f2fba7ab4b311171f6de3f
Score10/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-