Analysis
-
max time kernel
55s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system -
submitted
31-07-2022 23:42
Static task
static1
Behavioral task
behavioral1
Sample
5d5f9f84b2ec4a59bc92ca60f6cd5e5daf880884e8cb09e9aba216e68c470879.exe
Resource
win7-20220718-en
windows7-x64
1 signatures
150 seconds
General
-
Target
5d5f9f84b2ec4a59bc92ca60f6cd5e5daf880884e8cb09e9aba216e68c470879.exe
-
Size
485KB
-
MD5
a35aa9a89d71792159d175e595ec4754
-
SHA1
2bb5d313297d6674da7b2729e42c17c9d54d0eab
-
SHA256
5d5f9f84b2ec4a59bc92ca60f6cd5e5daf880884e8cb09e9aba216e68c470879
-
SHA512
c9ddb94f02ac0de2adb4ae5d1ed645a9072737ea72521b63bd37ea6a37314c828a4811638c445df14fb38212c99b421f566388af5937b76d072cff5271b17e6c
Malware Config
Extracted
Family
gozi_ifsb
Attributes
-
build
215165
Extracted
Family
gozi_ifsb
Botnet
3140
C2
isatawatag.com
bosototsuy.com
atamekihok.com
Attributes
-
build
215165
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
rsa_pubkey.plain
serpent.plain