Analysis
-
max time kernel
31s -
max time network
89s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
03-07-2022 09:04
Static task
static1
Behavioral task
behavioral1
Sample
3bf62a8b06e288572fb1058779c32457a3c3764114b919acf6faa49b9250a034.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
3bf62a8b06e288572fb1058779c32457a3c3764114b919acf6faa49b9250a034.exe
-
Size
215KB
-
MD5
00af7adc7a60bb4d69ddf7ba54cbe209
-
SHA1
8cc84a912b7fae1fe77a1f99b9ad513fe2f8a8b7
-
SHA256
3bf62a8b06e288572fb1058779c32457a3c3764114b919acf6faa49b9250a034
-
SHA512
6aade7b39f6e4ba903becb44da52ac88cf131663cbd861bbdd0ad073cfce1771c1490232f70939a35d44d58063b11f712425f2679622cf55d2f57546db23efad
Malware Config
Extracted
Family
gozi_ifsb
Attributes
-
build
215165
Extracted
Family
gozi_ifsb
Botnet
3153
C2
biesbetiop.com
kircherche.com
toforemedi.com
Attributes
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
rsa_pubkey.plain
serpent.plain