General
-
Target
5ad022998c560f03e7d781ab64e44c71c31c415bb188e295d78ab66c1bedeabc
-
Size
648KB
-
Sample
220802-cmkynafhgk
-
MD5
36c0301b8589c4547ccb3e3a39966ac5
-
SHA1
b075dec9a303fb2b33f6c2c9bb40e0b04c8fbd64
-
SHA256
5ad022998c560f03e7d781ab64e44c71c31c415bb188e295d78ab66c1bedeabc
-
SHA512
60df720547c0b53dfcca63e85c6d181a30a70ab5e79b19ae63ea4adea1cce6b5f2c768718c8509d0e6b8cf43de45b7099cf9b634b2e5ccbebf1ca41731048163
Static task
static1
Behavioral task
behavioral1
Sample
5ad022998c560f03e7d781ab64e44c71c31c415bb188e295d78ab66c1bedeabc.exe
Resource
win7-20220718-en
Malware Config
Extracted
gozi_ifsb
-
build
214062
Extracted
gozi_ifsb
3189
hfmjerrodo.com
w19jackyivah.com
l15uniquekylie.city
-
build
214062
-
dga_base_url
constitution.org/usdeclar.txt
-
dga_crc
0x4eb7d2ca
-
dga_season
10
-
dga_tlds
com
ru
org
-
exe_type
loader
-
server_id
12
Targets
-
-
Target
5ad022998c560f03e7d781ab64e44c71c31c415bb188e295d78ab66c1bedeabc
-
Size
648KB
-
MD5
36c0301b8589c4547ccb3e3a39966ac5
-
SHA1
b075dec9a303fb2b33f6c2c9bb40e0b04c8fbd64
-
SHA256
5ad022998c560f03e7d781ab64e44c71c31c415bb188e295d78ab66c1bedeabc
-
SHA512
60df720547c0b53dfcca63e85c6d181a30a70ab5e79b19ae63ea4adea1cce6b5f2c768718c8509d0e6b8cf43de45b7099cf9b634b2e5ccbebf1ca41731048163
-