General
-
Target
5d5f9f84b2ec4a59bc92ca60f6cd5e5daf880884e8cb09e9aba216e68c470879
-
Size
485KB
-
Sample
220731-3p5c7aeeeq
-
MD5
a35aa9a89d71792159d175e595ec4754
-
SHA1
2bb5d313297d6674da7b2729e42c17c9d54d0eab
-
SHA256
5d5f9f84b2ec4a59bc92ca60f6cd5e5daf880884e8cb09e9aba216e68c470879
-
SHA512
c9ddb94f02ac0de2adb4ae5d1ed645a9072737ea72521b63bd37ea6a37314c828a4811638c445df14fb38212c99b421f566388af5937b76d072cff5271b17e6c
Static task
static1
Behavioral task
behavioral1
Sample
5d5f9f84b2ec4a59bc92ca60f6cd5e5daf880884e8cb09e9aba216e68c470879.exe
Resource
win7-20220718-en
Malware Config
Extracted
gozi_ifsb
-
build
215165
Extracted
gozi_ifsb
3140
isatawatag.com
bosototsuy.com
atamekihok.com
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
5d5f9f84b2ec4a59bc92ca60f6cd5e5daf880884e8cb09e9aba216e68c470879
-
Size
485KB
-
MD5
a35aa9a89d71792159d175e595ec4754
-
SHA1
2bb5d313297d6674da7b2729e42c17c9d54d0eab
-
SHA256
5d5f9f84b2ec4a59bc92ca60f6cd5e5daf880884e8cb09e9aba216e68c470879
-
SHA512
c9ddb94f02ac0de2adb4ae5d1ed645a9072737ea72521b63bd37ea6a37314c828a4811638c445df14fb38212c99b421f566388af5937b76d072cff5271b17e6c
-