General
- Target 6260000.dll.exe
- Size 227KB
- Sample220919-reeh8scbb2
- SHA256 5e4ed5eebf8da36175d276643ac56c45d0d0e6b41bafc5add664771b4af56e14
- MD5 6a119851fc500071f23cf088aff1fa9d
- SHA1 caaad48357202e6b6c6fe40e66ebc002ebfe7172
- SHA512 43547e92d574ae57db5d1a6093418738fe10675521b2dea149bad7c1f21a16fe788bf7e4209da6b182ff8323c4578498a2f90c59b1805ea111a70346f3af7cfb
- SSDEEP 3072:dlfGqwJTeTEom3lIkR2SCD6q9KgyItk78mV0dfgxT/cqAVw5VgCK5hcjz3xJFoc:dlDosEPR66q9KgylInd6oqAVD5MnFoc
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
6260000.dll
Resource
win7-20220901-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
6260000.dll
Resource
win10v2004-20220901-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
10101
C2
-
trackingg-protectioon.cdn1.mozilla.net
-
45.8.158.104
-
188.127.224.114
-
weiqeqwns.com
-
wdeiqeqwns.com
-
weiqeqwens.com
-
weiqewqwns.com
-
iujdhsndjfks.com
Attributes
-
base_path
/uploaded/
-
exe_type
worker
-
extension
.pct
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target 6260000.dll.exe
- Size 227KB
- SHA256 5e4ed5eebf8da36175d276643ac56c45d0d0e6b41bafc5add664771b4af56e14
- MD5 6a119851fc500071f23cf088aff1fa9d
- SHA1 caaad48357202e6b6c6fe40e66ebc002ebfe7172
- SHA512 43547e92d574ae57db5d1a6093418738fe10675521b2dea149bad7c1f21a16fe788bf7e4209da6b182ff8323c4578498a2f90c59b1805ea111a70346f3af7cfb
- SSDEEP 3072:dlfGqwJTeTEom3lIkR2SCD6q9KgyItk78mV0dfgxT/cqAVw5VgCK5hcjz3xJFoc:dlDosEPR66q9KgylInd6oqAVD5MnFoc
- MD5 SHA1 SHA512 SSDEEP
Score1/10