General
- Target bd00000.dll.exe
- Size 227KB
- Sample220920-qc8tmageeq
- SHA256 653081b87914c396a900423534b5bb136712c1f8f72d13d8d3e3b6f89daecc81
- MD5 90d163797743ed1515428604d820a855
- SHA1 e24d4a2a94966d111739d2b5a56fb899ee830ca3
- SHA512 86b768f49e4cc4be387e5bf4dcae910a3872479c02709efe29c4922010a9099e61efbb657f5977706d2ab76585aa84643581780a8e83b0aab1212d2c296fea1d
- SSDEEP 6144:dlDosEPR66q9KgylInd6oqAShD58nFoc:HUPR6D9KDInd6oqAIWF
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
bd00000.dll
Resource
win7-20220812-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
bd00000.dll
Resource
win10v2004-20220812-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
10101
C2
-
trackingg-protectioon.cdn1.mozilla.net
-
45.8.158.104
-
188.127.224.114
-
weiqeqwns.com
-
wdeiqeqwns.com
-
weiqeqwens.com
-
weiqewqwns.com
-
iujdhsndjfks.com
Attributes
-
base_path
/uploaded/
-
exe_type
worker
-
extension
.pct
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target bd00000.dll.exe
- Size 227KB
- SHA256 653081b87914c396a900423534b5bb136712c1f8f72d13d8d3e3b6f89daecc81
- MD5 90d163797743ed1515428604d820a855
- SHA1 e24d4a2a94966d111739d2b5a56fb899ee830ca3
- SHA512 86b768f49e4cc4be387e5bf4dcae910a3872479c02709efe29c4922010a9099e61efbb657f5977706d2ab76585aa84643581780a8e83b0aab1212d2c296fea1d
- SSDEEP 6144:dlDosEPR66q9KgylInd6oqAShD58nFoc:HUPR6D9KDInd6oqAIWF
- MD5 SHA1 SHA512 SSDEEP
Score1/10