General

  • Target

    155c8600000.dll

  • Size

    215KB

  • MD5

    41c5408a5eb15282b1bdd3971cbd2b70

  • SHA1

    b1594753e47702056a4da29d7abdc5b6f60c31dc

  • SHA256

    2df2eb7dff15cb80269452e6fe93c839f7f995ae69c961d087a54d329b0dc6c8

  • SHA512

    4723f8517c805fb6500d0af2a9e53fbf2a46667530241ca94490cf1b0badedd7f4c6328005b768dba69f3b777ac0417a0d326946290fdaf01d9e01ad3a89872c

  • SSDEEP

    6144:yOZiNwkzdjpi5azwE2uP3qqMFTXvAe59jwNq:yHwkx9cazwE2Y3q9TXvAJN

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

3000

C2

94.198.40.47

94.198.40.58

havefuntxmm.at

Attributes
  • base_path

    /images/

  • exe_type

    worker

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 155c8600000.dll
    .dll windows x64

    a1ef83cc18cbaac921ccd21be4b7287d


    Headers

    Imports

    Sections