General

  • Target

    bd00000.dll.exe

  • Size

    227KB

  • MD5

    90d163797743ed1515428604d820a855

  • SHA1

    e24d4a2a94966d111739d2b5a56fb899ee830ca3

  • SHA256

    653081b87914c396a900423534b5bb136712c1f8f72d13d8d3e3b6f89daecc81

  • SHA512

    86b768f49e4cc4be387e5bf4dcae910a3872479c02709efe29c4922010a9099e61efbb657f5977706d2ab76585aa84643581780a8e83b0aab1212d2c296fea1d

  • SSDEEP

    6144:dlDosEPR66q9KgylInd6oqAShD58nFoc:HUPR6D9KDInd6oqAIWF

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

10101

C2

trackingg-protectioon.cdn1.mozilla.net

45.8.158.104

188.127.224.114

weiqeqwns.com

wdeiqeqwns.com

weiqeqwens.com

weiqewqwns.com

iujdhsndjfks.com

Attributes
  • base_path

    /uploaded/

  • exe_type

    worker

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • bd00000.dll.exe
    .dll windows x64

    81de4ee1071a8320787d7c9e149ace7f


    Headers

    Imports

    Sections