General
-
Target
d4dd81bf1125043f5f4552096b1e466c4e44a8fb2c1bd42c1d9991d1a4541870
-
Size
203KB
-
Sample
220725-c8631sbea2
-
MD5
bebbb07a1c0e47b8739488541475eeb8
-
SHA1
30040fe4946f9e9eb214cffc64d2c88878e8a7be
-
SHA256
d4dd81bf1125043f5f4552096b1e466c4e44a8fb2c1bd42c1d9991d1a4541870
-
SHA512
0e87ba93872ad612316ddfacf416b0c27f89fb1130fe58c155bf7e43bc3141a5ea4e2321c5c1ed2408b13bc9a4d4110ab9e37c73d1e34262739d8d5553fad7a5
Static task
static1
Behavioral task
behavioral1
Sample
d4dd81bf1125043f5f4552096b1e466c4e44a8fb2c1bd42c1d9991d1a4541870.exe
Resource
win7-20220715-en
Malware Config
Extracted
gozi_ifsb
-
build
215165
Extracted
gozi_ifsb
3162
menehleibe.com
liemuteste.com
thulligend.com
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
d4dd81bf1125043f5f4552096b1e466c4e44a8fb2c1bd42c1d9991d1a4541870
-
Size
203KB
-
MD5
bebbb07a1c0e47b8739488541475eeb8
-
SHA1
30040fe4946f9e9eb214cffc64d2c88878e8a7be
-
SHA256
d4dd81bf1125043f5f4552096b1e466c4e44a8fb2c1bd42c1d9991d1a4541870
-
SHA512
0e87ba93872ad612316ddfacf416b0c27f89fb1130fe58c155bf7e43bc3141a5ea4e2321c5c1ed2408b13bc9a4d4110ab9e37c73d1e34262739d8d5553fad7a5
-