General

  • Target

    d900000.dll

  • Size

    215KB

  • MD5

    a285ba69ef3e60adfce0fe1df0bab034

  • SHA1

    168f1175be084ed3fe6c0362eddf405cef03d417

  • SHA256

    04f7ebb6a7380323e296eb86c1c328099ba11b935cd9394dec58bfac26854df0

  • SHA512

    52c005a01726a72b30814f989ad56ad8ee2b37f8c45f479de76248d30dc31a9bebe99079d8d25bf454eeb58ceb6d9cdf283e7ae662c26de8d09c63fa79471787

  • SSDEEP

    6144:yOZiNwkzdjpi5azwE2uP3qqMFTXvAe59jwNq:yHwkx9cazwE2Y3q9TXvAxN

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

3000

C2

94.198.40.47

94.198.40.58

havefuntxmm.at

Attributes
  • base_path

    /images/

  • exe_type

    worker

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • d900000.dll
    .dll windows x64

    a1ef83cc18cbaac921ccd21be4b7287d


    Headers

    Imports

    Sections