gozi_ifsb | 740-135-0x0000000000400000-0x0000000000462000-memory[.]dmp

General

Target
740-135-0x0000000000400000-0x0000000000462000-memory.dmp
Size 392KB
Sample220803-rxzbcsdbar
SHA256 0b23f86ae4f1f0dca1f876b192e9f2c787de6cb0914cc9bf7d6059b642164bbb
MD5 c24616355a88317d04510d78a06f9a6e
SHA1 1e82ea5635a02805bc71469077eb8ce19ff2dc9d
SHA512 ca54fa55ad7f3664f099d211b71dbf4edf7994dac8bddf9caa37b399fd989a1010f1fa2371f073b729e66089393a50219cac1ff1bea74d7dcdde69016fa4379d
SSDEEP 6144:XfI/jSKQGiTK6AOQXMwYIK3IV7l0doNn2ay964atVFtr57:PEjSKATXHQX9YIK3y6d8n7y9+75
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

11111 gozi_ifsb

Family

Botnet

C2

Attributes

rsa_pubkey.plain

aes.plain

SHA256 0b23f86ae4f1f0dca1f876b192e9f2c787de6cb0914cc9bf7d6059b642164bbb
MD5 c24616355a88317d04510d78a06f9a6e
SHA1 1e82ea5635a02805bc71469077eb8ce19ff2dc9d
SHA512 ca54fa55ad7f3664f099d211b71dbf4edf7994dac8bddf9caa37b399fd989a1010f1fa2371f073b729e66089393a50219cac1ff1bea74d7dcdde69016fa4379d
SSDEEP 6144:XfI/jSKQGiTK6AOQXMwYIK3IV7l0doNn2ay964atVFtr57:PEjSKATXHQX9YIK3y6d8n7y9+75
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

6902

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths