Overview

overview

10

Static

static

10

gozi.dll

windows7-x64

1

gozi.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    gozi.payload-disk

  • Size

    43KB

  • MD5

    c0fb5ae2613005dbdffdf4cbd66d9304

  • SHA1

    cf63a0f5a34b43a33f4411026e5ba9998423eb6a

  • SHA256

    5c3a98757492f66858c778197273a6fd4cf3e8f54c3dd5c4254b4fc43b4289a0

  • SHA512

    ca614f50f67d70570ec19932cc5eaa509cf778741bd4c74d680c5239618cf47bc32cadd00b731549bc1780cec9783ec6ad7679e993422fd380683d0131e9d76b

  • SSDEEP

    768:klYhzJ2VQEFfLCUeQCuu6Mf39Y+RMRZOz4yM7gp/6lvVpG:klYhzJ2VQEFf/2VYuAZOzNM7uyHG

Score
10/10
10101gozi_ifsb

Malware Config

Extracted

Family

gozi_ifsb

Botnet

10101

C2

trackingg-protectioon.cdn1.mozilla.net

45.8.158.104

188.127.224.114

weiqeqwns.com

wdeiqeqwns.com

weiqeqwens.com

weiqewqwns.com

iujdhsndjfks.com
Attributes
  • base_path

    /uploaded/

  • build

    250240

  • exe_type

    loader

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • gozi.payload-disk
    .dll windows x86

    ef075d26b728b78a932306e24062e80c


    Headers

    Imports

    Sections