General

  • Target

    6450000.dll.exe

  • Size

    227KB

  • MD5

    ba91db1fedca355bc7ace391f0a32390

  • SHA1

    e17491e4e65a60f4860f8ac56125b51e5e9039f8

  • SHA256

    d7c21a2d7356de716a0d38bd83ca240c7c12b3830494ffde30e3599fa2243b5c

  • SHA512

    805776d402a5c2795425e643ae23eaf1c5cb59b0d509fe30c7728403f2e93388d7a5d075c3749f8820e23a578341963a6ac638c5927e9278533f6915dba3ea30

  • SSDEEP

    3072:dlfGqwJTeTEom3lIkR2SCD6q9KgyItk78mV0dfgxT/cqAww5VgCK5hcjeZxJFoc:dlDosEPR66q9KgylInd6oqAwD5HnFoc

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

10101

C2

trackingg-protectioon.cdn1.mozilla.net

45.8.158.104

188.127.224.114

weiqeqwns.com

wdeiqeqwns.com

weiqeqwens.com

weiqewqwns.com

iujdhsndjfks.com

Attributes
  • base_path

    /uploaded/

  • exe_type

    worker

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 6450000.dll.exe
    .dll windows x64

    81de4ee1071a8320787d7c9e149ace7f


    Headers

    Imports

    Sections