General
- Target d210000.dll.exe
- Size 227KB
- Sample220919-qjdbasecgk
- SHA256 2f4f1afcef4095b8e8e70d66c2d2866d27db31698079ad854a5922ed5fac67f3
- MD5 45edf1cd50aa030a9d04c0b589132ac2
- SHA1 7bf3a5bb5108550443c28d899751008e30967960
- SHA512 c17ef2cbb1c1ad2b6f89cc55933b9e790739fe5768bf29e61c5350ed7b46700eb4a3620790245967babf71b14d6b6d25f021e397d7aa8fa785c8bc09058f77d1
- SSDEEP 6144:mlDosEPR66q9KgylInd6oqAXyD5anFoc:SUPR6D9KDInd6oqAiYF
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
d210000.dll
Resource
win7-20220812-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
d210000.dll
Resource
win10v2004-20220812-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
30000
C2
-
trackingg-protectioon.cdn1.mozilla.net
-
45.8.158.104
-
188.127.224.114
-
weiqeqwns.com
-
wdeiqeqwns.com
-
weiqeqwens.com
-
weiqewqwns.com
-
iujdhsndjfks.com
Attributes
-
base_path
/uploaded/
-
exe_type
worker
-
extension
.pct
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target d210000.dll.exe
- Size 227KB
- SHA256 2f4f1afcef4095b8e8e70d66c2d2866d27db31698079ad854a5922ed5fac67f3
- MD5 45edf1cd50aa030a9d04c0b589132ac2
- SHA1 7bf3a5bb5108550443c28d899751008e30967960
- SHA512 c17ef2cbb1c1ad2b6f89cc55933b9e790739fe5768bf29e61c5350ed7b46700eb4a3620790245967babf71b14d6b6d25f021e397d7aa8fa785c8bc09058f77d1
- SSDEEP 6144:mlDosEPR66q9KgylInd6oqAXyD5anFoc:SUPR6D9KDInd6oqAiYF
- MD5 SHA1 SHA512 SSDEEP
Score1/10