General

  • Target

    21cab000000.dll

  • Size

    215KB

  • MD5

    8007d59551f6f0663c59f33170f60611

  • SHA1

    38c06af4722b3eadb026a06ce5983f14f92480f7

  • SHA256

    fc40aa7b2bf8bf5e94a07d2725cd47cd4b43c87665709b623eb418327abb5ebc

  • SHA512

    80a471ce703aebe0952dacf4a8301b0e5d6c514b583a46d07e7ffcfab9c466d192e0897f1b27bcfd90054da33d9a4039a9840c5be68c51e4ee972e0f6dc1e5b4

  • SSDEEP

    6144:yOZiNwkzdjpi5azwE2uP3qqMFTXvAe52jwNq:yHwkx9cazwE2Y3q9TXvAkN

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

3000

C2

94.198.40.47

94.198.40.58

havefuntxmm.at

Attributes
  • base_path

    /images/

  • exe_type

    worker

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 21cab000000.dll
    .dll windows x64

    a1ef83cc18cbaac921ccd21be4b7287d


    Headers

    Imports

    Sections