Overview

overview

10

Static

static

10

gozi.dll

windows7-x64

1

gozi.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    gozi.payload-disk

  • Size

    43KB

  • MD5

    a99d73dac1b6b4c94d316819fc13b27a

  • SHA1

    ba54521cf95e050fc501a5e16abc3f41b0fab2a9

  • SHA256

    4e763b77484cb34840c39e6d46be5375c8bf07e4d39ede2464095d4e7bc252fd

  • SHA512

    00671d41a84425039f7a77ed094529236ae83122347ffe2874e80af4e4beac6840a6e5ba563930ef4a6675900b27eb79368141288dad8316a9fa00fabef9b619

  • SSDEEP

    768:6lYhzJ2VQEFfLCUeQCuu6Mf39Y+RMRZOz4yM7gp/6lvVp:6lYhzJ2VQEFf/2VYuAZOzNM7uyH

Score
10/10
10103gozi_ifsb

Malware Config

Extracted

Family

gozi_ifsb

Botnet

10103

C2

trackingg-protectioon.cdn1.mozilla.net

45.8.158.104

188.127.224.114

weiqeqwns.com

wdeiqeqwns.com

weiqeqwens.com

weiqewqwns.com

iujdhsndjfks.com
Attributes
  • base_path

    /uploaded/

  • build

    250240

  • exe_type

    loader

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • gozi.payload-disk
    .dll windows x86

    ef075d26b728b78a932306e24062e80c


    Headers

    Imports

    Sections