General
- Target 155c8600000.dll
- Size 215KB
- Sample220808-ml58babfh3
- SHA256 2df2eb7dff15cb80269452e6fe93c839f7f995ae69c961d087a54d329b0dc6c8
- MD5 41c5408a5eb15282b1bdd3971cbd2b70
- SHA1 b1594753e47702056a4da29d7abdc5b6f60c31dc
- SHA512 4723f8517c805fb6500d0af2a9e53fbf2a46667530241ca94490cf1b0badedd7f4c6328005b768dba69f3b777ac0417a0d326946290fdaf01d9e01ad3a89872c
- MD5 SHA1 SHA512
Behavioral task
behavioral1
Sample
155c8600000.dll
Resource
win7-20220718-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
155c8600000.dll
Resource
win10v2004-20220721-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
3000
C2
-
94.198.40.47
-
94.198.40.58
-
havefuntxmm.at
Attributes
-
base_path
/images/
-
exe_type
worker
-
extension
.jlk
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target 155c8600000.dll
- Size 215KB
- SHA256 2df2eb7dff15cb80269452e6fe93c839f7f995ae69c961d087a54d329b0dc6c8
- MD5 41c5408a5eb15282b1bdd3971cbd2b70
- SHA1 b1594753e47702056a4da29d7abdc5b6f60c31dc
- SHA512 4723f8517c805fb6500d0af2a9e53fbf2a46667530241ca94490cf1b0badedd7f4c6328005b768dba69f3b777ac0417a0d326946290fdaf01d9e01ad3a89872c
- MD5 SHA1 SHA512
Score1/10