General

  • Target

    d90000.dll

  • Size

    43KB

  • MD5

    eca07d4832195d6205fa8147a754b1c7

  • SHA1

    56ed19c1413e29fdeed4c70ca1c0e1110e303d75

  • SHA256

    bfe5b48438a4c2bedc4f91cf8376a29cdb99cfd14c310cccb94eededa8371ce6

  • SHA512

    505b11ff115d033ea608f35a22eb48ade4fa81eff6435006c90f16c97a4fd02c9d336facd7a8055a34e47a6e3f732236d51e0531e31b140fa932134eaa4e2891

  • SSDEEP

    768:7mQp7q0kzrdzjj+jVmXaKrOXNk4snxuZhTeOx1ZTVQWMyYPEub0c1B:7Np7q0WV+pmKe890QeOxzaWMyYPEu0G

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

30000

C2

trackingg-protectioon.cdn1.mozilla.net

185.240.103.79

weiqeqwns.com

wdeiqeqwns.com

weiqeqwens.com

weiqewqwns.com

Attributes
  • base_path

    /uploaded/

  • build

    250239

  • exe_type

    loader

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • d90000.dll
    .dll windows x86

    b1e1d582732e4e48ca192109b68c23b4


    Headers

    Imports

    Sections