Analysis
-
max time kernel
40s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
01-07-2022 03:00
Static task
static1
Behavioral task
behavioral1
Sample
4cd2e7d36be54fb8fe1179df72640ef515c71d3b6a37dea038c80f50f7dc36dc.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
4cd2e7d36be54fb8fe1179df72640ef515c71d3b6a37dea038c80f50f7dc36dc.exe
-
Size
239KB
-
MD5
4b1c9710151790485ab6de74acd349ae
-
SHA1
58e3503e1e1f09087b72d55804d5e7eb87f07fd0
-
SHA256
4cd2e7d36be54fb8fe1179df72640ef515c71d3b6a37dea038c80f50f7dc36dc
-
SHA512
c26914acfcda10ea750a8bddd5556fddcfe0207ba894db3a85d036ead1efdb4ffe186e89de10985392f3c7cc9901dfbeaf505e9b2c98a86307b9596ba541462a
Malware Config
Extracted
Family
gozi_ifsb
Attributes
-
build
214085
Extracted
Family
gozi_ifsb
Botnet
3474
C2
google.com
gmail.com
q982yeq23.xyz
t7763jykqeiy.com
hjruu.com
Attributes
-
build
214085
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
rsa_pubkey.plain
serpent.plain
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1652-54-0x0000000076461000-0x0000000076463000-memory.dmpFilesize
8KB
-
memory/1652-55-0x00000000009C0000-0x00000000009CE000-memory.dmpFilesize
56KB
-
memory/1652-56-0x00000000009C0000-0x0000000000AC6000-memory.dmpFilesize
1.0MB
-
memory/1652-57-0x00000000000F0000-0x00000000000FF000-memory.dmpFilesize
60KB