General

  • Target

    6710000.dll.exe

  • Size

    227KB

  • MD5

    a17b6f2585b3d97713172df1994fea8e

  • SHA1

    5bb3bcc7fa3addab27618085b04bf66137aa0f84

  • SHA256

    7caf7ee3c2ab2380084b372114295946cb919fc3b55308deca862132f52d4b51

  • SHA512

    1430a3956ab3c67e6a2da5bfcdbba1ba3207243e83f22fe98e6378cd83859e078fbe324b99e4ae0b07bb1425bcf69dd20fb5f0dc72b315dd1425478f252d7022

  • SSDEEP

    3072:H5hinZgCo+NjJWSsznC2OCyzjFIz4V1T/JDR1vW+BB78C752cj4L5eB:H+nZ1o+NJWbn2CMFIzSTRDR1vW+R5UK

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

3000

C2

89.41.26.90

89.41.26.93

5.42.199.83

denterdrigx.com

digserchx.at

Attributes
  • base_path

    /images/

  • exe_type

    worker

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 6710000.dll.exe
    .dll windows x64

    81de4ee1071a8320787d7c9e149ace7f


    Headers

    Imports

    Sections