Overview

overview

10

Static

static

10

gozi.dll

windows7-x64

1

gozi.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    gozi.payload-disk

  • Size

    43KB

  • MD5

    f980487d628f311f509054b16b2dcd27

  • SHA1

    fe58d66a5e7eff0f88d9d5864d24aae03ed7d37e

  • SHA256

    0655775eb61d545ea797d4ff332f78c551f992784f6139132f3f1339093e2e4f

  • SHA512

    3ceb4f8c882211b7d0499efead6828dd5331a2830500478cdbf3bd23b91a1b61b95f2f89ef98558fd5abd3fab6346eb39aa1e8179ae03dd6641c17c6925d65ab

  • SSDEEP

    768:xlYhzJ2VQEFfLCUeQCuu6Mf39Y+RMRZOz4yM7gp/6lvVp:xlYhzJ2VQEFf/2VYuAZOzNM7uyH

Score
10/10
10101gozi_ifsb

Malware Config

Extracted

Family

gozi_ifsb

Botnet

10101

C2

trackingg-protectioon.cdn1.mozilla.net

185.240.103.79

weiqeqwns.com

wdeiqeqwns.com

weiqeqwens.com

weiqewqwns.com
Attributes
  • base_path

    /uploaded/

  • build

    250240

  • exe_type

    loader

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • gozi.payload-disk
    .dll windows x86

    ef075d26b728b78a932306e24062e80c


    Headers

    Imports

    Sections