General

  • Target
    10000000.dll
  • Size 39KB
  • Sample220901-rt5zqsehbr
  • SHA256 0de05524e9e2c94220be1df9f09d2b3a3b1d15a4659f69f7bf8271366ae0a91b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • gozi_ifsb

Botnet
  • 3000

C2
  • config.edge.skype.com

  • superstarts.top

  • superlist.top

  • internetcoca.in

  • 193.106.191.163

Attributes
  • base_path

    /drew/

  • build

    250240

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

File Explorer

  • 10000000.dll
    .dll 39KB

10000000.dll

  • IMPHASH 0d3ce1aa4e05aa830613233bf85702d3
  • SHA256 0de05524e9e2c94220be1df9f09d2b3a3b1d15a4659f69f7bf8271366ae0a91b
  • MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
6386
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths