General
- Target 6450000.dll
- Size 227KB
- Sample220922-jfyphaaed7
- SHA256 d7c21a2d7356de716a0d38bd83ca240c7c12b3830494ffde30e3599fa2243b5c
- MD5 ba91db1fedca355bc7ace391f0a32390
- SHA1 e17491e4e65a60f4860f8ac56125b51e5e9039f8
- SHA512 805776d402a5c2795425e643ae23eaf1c5cb59b0d509fe30c7728403f2e93388d7a5d075c3749f8820e23a578341963a6ac638c5927e9278533f6915dba3ea30
- SSDEEP 3072:dlfGqwJTeTEom3lIkR2SCD6q9KgyItk78mV0dfgxT/cqAww5VgCK5hcjeZxJFoc:dlDosEPR66q9KgylInd6oqAwD5HnFoc
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
6450000.dll
Resource
win7-20220812-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
6450000.dll
Resource
win10v2004-20220901-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
10101
C2
-
trackingg-protectioon.cdn1.mozilla.net
-
45.8.158.104
-
188.127.224.114
-
weiqeqwns.com
-
wdeiqeqwns.com
-
weiqeqwens.com
-
weiqewqwns.com
-
iujdhsndjfks.com
Attributes
-
base_path
/uploaded/
-
exe_type
worker
-
extension
.pct
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target 6450000.dll
- Size 227KB
- SHA256 d7c21a2d7356de716a0d38bd83ca240c7c12b3830494ffde30e3599fa2243b5c
- MD5 ba91db1fedca355bc7ace391f0a32390
- SHA1 e17491e4e65a60f4860f8ac56125b51e5e9039f8
- SHA512 805776d402a5c2795425e643ae23eaf1c5cb59b0d509fe30c7728403f2e93388d7a5d075c3749f8820e23a578341963a6ac638c5927e9278533f6915dba3ea30
- SSDEEP 3072:dlfGqwJTeTEom3lIkR2SCD6q9KgyItk78mV0dfgxT/cqAww5VgCK5hcjeZxJFoc:dlDosEPR66q9KgylInd6oqAwD5HnFoc
- MD5 SHA1 SHA512 SSDEEP
Score1/10