General
- Target e970000.dll.exe
- Size 227KB
- Sample220906-massvabbf4
- SHA256 459ae352ddf8d4b69efbad05bba5b03d2a54d810407ec3f85b42b7175af90689
- MD5 021d3147fa2f3736c19e070ace19c6ba
- SHA1 e17e7a040683629dea57be04d2a08a5ce0c04b6c
- SHA512 61b3aa80587536930d6431b5eabab4ec5c4ff38cc2297360810bfbd3317e719178216a10fc3692e7c261609c7a93babe29266f38e1b9d08343a8ec0e008f0e2e
- SSDEEP 3072:m5hinZgCo+NjJWSsznC2OCyzjFIz4V1T/JDR1vFBB78C752cjyv5e:m+nZ1o+NJWbn2CMFIzSTRDR1vFR5a
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
e970000.dll
Resource
win7-20220901-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
e970000.dll
Resource
win10v2004-20220812-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
3000
C2
-
superliner.top
-
superlinez.top
-
internetlined.com
-
internetlines.in
-
medialists.su
-
medialists.ru
-
mediawagi.info
-
mediawagi.ru
-
5.42.199.83
-
denterdrigx.com
-
digserchx.at
Attributes
-
base_path
/images/
-
exe_type
worker
-
extension
.jlk
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target e970000.dll.exe
- Size 227KB
- SHA256 459ae352ddf8d4b69efbad05bba5b03d2a54d810407ec3f85b42b7175af90689
- MD5 021d3147fa2f3736c19e070ace19c6ba
- SHA1 e17e7a040683629dea57be04d2a08a5ce0c04b6c
- SHA512 61b3aa80587536930d6431b5eabab4ec5c4ff38cc2297360810bfbd3317e719178216a10fc3692e7c261609c7a93babe29266f38e1b9d08343a8ec0e008f0e2e
- SSDEEP 3072:m5hinZgCo+NjJWSsznC2OCyzjFIz4V1T/JDR1vFBB78C752cjyv5e:m+nZ1o+NJWbn2CMFIzSTRDR1vFR5a
- MD5 SHA1 SHA512 SSDEEP
Score1/10