Resubmissions

20/09/2022, 16:29

220920-tzgkfadfh9 10

20/09/2022, 13:08

220920-qc8tmageer 10

General

  • Target

    336.exe

  • Size

    37KB

  • MD5

    336c7660a25f0c6acce00bc67751494b

  • SHA1

    d87da6de98061ebd304b3ec544fa5dff9c587f23

  • SHA256

    33fb403df3fbb04985e39e47f3be1f71a9d9ac2f3d1339823c5b4ece82a4cb78

  • SHA512

    cd5f61ceb6ca7bc958d0abe63e6dd265b9681d845799f456c3e6559ce72b53837aacf4b5d4c23bb965e86cb4af1c0b9fc48e0481ff8955ef49748fc01ad3b1b6

  • SSDEEP

    768:X41V8UHIm2MyxfbbFh6M5PhR3xtIJucXWXbuRRc6Pg5Onb:XefIZMofb5hB5PhR3xiucXWruMO

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

80000

C2

trackingg-protectioon.cdn1.mozilla.net

45.8.158.104

188.127.224.114

weiqeqwns.com

wdeiqeqwns.com

weiqeqwens.com

weiqewqwns.com

iujdhsndjfks.com

Attributes
  • base_path

    /uploaded/

  • build

    250240

  • exe_type

    loader

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 336.exe
    .exe windows x86

    a225a198dd77b77924eb15a705beb665


    Headers

    Imports

    Sections