General

  • Target

    a230000.dll

  • Size

    227KB

  • MD5

    ee79ba8f5e0de27d4f6c8eaacfb26bb6

  • SHA1

    f8a190b628b8d42555afddd1fb79f91adac9c712

  • SHA256

    3d05e3f5f662ef39b92dfc1dc6344a400d109bcc6d55c6f7182983f6d1a72541

  • SHA512

    9cb80adcb6d0f76fdfea6f05718e2124d86e22ee75519e4bef637adb2edf599a0b654ae7ec30f689e233cc60294fd9e9b809490c74696e0a26ff70b35283b6c7

  • SSDEEP

    3072:X5hinZgCo+NjJWSsznC2OCyzjFIz4V1T/JDR1vHBB78C752cj/FJ5e:X+nZ1o+NJWbn2CMFIzSTRDR1vHR55J

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

11111

C2

trackin1g-protection.cdnn.mozilla.net

176.10.119.80

194.76.224.245

31.214.157.77

chnkdgpopupser.at

185.158.250.220

185.158.250.234

194.76.224.181

Attributes
  • base_path

    /fonts/

  • exe_type

    worker

  • extension

    .bak

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • a230000.dll
    .dll windows x64

    81de4ee1071a8320787d7c9e149ace7f


    Headers

    Imports

    Sections