Analysis
-
max time kernel
44s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
01-07-2022 05:33
Static task
static1
Behavioral task
behavioral1
Sample
772f0fd19c257b93e228774416293dddd4061609ead73db7a92d2196f1e1757d.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
772f0fd19c257b93e228774416293dddd4061609ead73db7a92d2196f1e1757d.exe
-
Size
235KB
-
MD5
d5a78f7b2e3ebf8943ba787275567930
-
SHA1
c490b30a177631997fe48faba116b3de7bf9c9de
-
SHA256
772f0fd19c257b93e228774416293dddd4061609ead73db7a92d2196f1e1757d
-
SHA512
bf21beb36873bb6f13dd01d47657e1bb7e53836b565c8f54849cd79f731ebb0ac4f448f63b102f3cb0463b515aa09484877cfeffc269e244515c150c1482be7b
Malware Config
Extracted
Family
gozi_ifsb
Attributes
-
build
217173
Extracted
Family
gozi_ifsb
Botnet
3324
C2
r588uaacornell.info
v22xscot.info
tzdottopm.xyz
Attributes
-
build
217173
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
rsa_pubkey.plain
serpent.plain