General

  • Target

    1f0000.dll

  • Size

    43KB

  • MD5

    0e7b6545fb55879769205ed817d30641

  • SHA1

    36873e6314a9031a1379630bbc8283724c8cd53a

  • SHA256

    3ba96e7cee31d8dd25283c4edc6cac201c6dd081b779a03222affd4bc4f7f28b

  • SHA512

    b96402754dbe3d0386fed7ed2a68d090d3b458cc75c46c11d903bd21ab1a98e53a9fc9ef0d91f65015cb85f843f75b1991623eefc50b1f19465db587d80b8d7a

  • SSDEEP

    768:xlYhzJ2VQEFfLCUeQCuu6Mf39Y+RMRZOz4jDMQ6lvVp:xlYhzJ2VQEFf/2VYuAZOzYDMQyH

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

10101

C2

trackingg-protectioon.cdn1.mozilla.net

185.240.103.79

weiqeqwns.com

wdeiqeqwns.com

weiqeqwens.com

weiqewqwns.com

Attributes
  • base_path

    /uploaded/

  • build

    250240

  • exe_type

    loader

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 1f0000.dll
    .dll windows x86

    b1e1d582732e4e48ca192109b68c23b4


    Headers

    Imports

    Sections