General
-
Target
a63f4d6f5c791eb5980c96087d1902670c9cbea15f02306ad363ef187810c7b4
-
Size
216KB
-
Sample
220724-vb4kqsbcf9
-
MD5
eab6d9826991ecc93f65c9eadeef444b
-
SHA1
2712e562b7412173d6aec45a0758721da65b8b2e
-
SHA256
a63f4d6f5c791eb5980c96087d1902670c9cbea15f02306ad363ef187810c7b4
-
SHA512
8a896987db031350403ebb74c169ef16a6a1663c095cff1e76b66b08b6951e34b31c810b1d2201447c449c8864bf1197be09b867a8e10120962409f2ec6e7b32
Behavioral task
behavioral1
Sample
a63f4d6f5c791eb5980c96087d1902670c9cbea15f02306ad363ef187810c7b4.dll
Resource
win7-20220715-en
Malware Config
Extracted
gozi_ifsb
2222
http://securemrc.ru
http://securecc.ru
http://roiboypo.ru
-
build
217111
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
a63f4d6f5c791eb5980c96087d1902670c9cbea15f02306ad363ef187810c7b4
-
Size
216KB
-
MD5
eab6d9826991ecc93f65c9eadeef444b
-
SHA1
2712e562b7412173d6aec45a0758721da65b8b2e
-
SHA256
a63f4d6f5c791eb5980c96087d1902670c9cbea15f02306ad363ef187810c7b4
-
SHA512
8a896987db031350403ebb74c169ef16a6a1663c095cff1e76b66b08b6951e34b31c810b1d2201447c449c8864bf1197be09b867a8e10120962409f2ec6e7b32
-