General

  • Target

    168cf1d0000.dll.exe

  • Size

    227KB

  • MD5

    2ca25dca1f3b324e079f47ad66622852

  • SHA1

    91a3ab4a30508943449f118112ad81502d1f2122

  • SHA256

    70d282f2993db80c89217a279074bfed88394caca6a2cf88f558e8674a2ace5f

  • SHA512

    4e05bb55e06186bdff9379acc2907bf898f3034172903943ec9e4ea0c2203fa2460a839bd8a05dc46fea44609d04196396ac9783ee672a875a0fc1d0adbfab4b

  • SSDEEP

    6144:dlDosEPR66q9KgylInd6oqAHhD5VnFoc:HUPR6D9KDInd6oqABrF

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

10101

C2

trackingg-protectioon.cdn1.mozilla.net

45.8.158.104

188.127.224.114

weiqeqwns.com

wdeiqeqwns.com

weiqeqwens.com

weiqewqwns.com

iujdhsndjfks.com

Attributes
  • base_path

    /uploaded/

  • exe_type

    worker

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 168cf1d0000.dll.exe
    .dll windows x64

    81de4ee1071a8320787d7c9e149ace7f


    Headers

    Imports

    Sections