Overview

overview

10

Static

static

10

gozi.exe

windows7-x64

10

gozi.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    gozi.exe

  • Size

    37KB

  • MD5

    0fb936e81e49062d54ff77adc0be531d

  • SHA1

    bab4658dbfc5635d2b083b0e0065a6538277baf2

  • SHA256

    4800652d420be772f2d84aa67aa25edbfa8c47efe836c64bf7fa1619480f5a4a

  • SHA512

    c88a19ea07df0e36cad23494281a62cec95936dd2c086f766f0ccc7d7f7d737a6fe523eb3c499e05f87c9b01a971f44b57dcd215a77d93ab507c3c759bf4d0ac

  • SSDEEP

    768:Y41V8UHIm27yCBMoxKRZsLgY5AQnkcgIHAs5Tdh77k3mNrow:YefIZ7NBR6Zsd5U8f5xhfk3eo

Score
10/10
70000gozi_ifsb

Malware Config

Extracted

Family

gozi_ifsb

Botnet

70000

C2

trackingg-protectioon.cdn1.mozilla.net

45.8.158.104

188.127.224.114

weiqeqwns.com

wdeiqeqwns.com

weiqeqwens.com

weiqewqwns.com

iujdhsndjfks.com
Attributes
  • base_path

    /uploaded/

  • build

    250240

  • exe_type

    loader

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • gozi.exe
    .exe windows x86

    a225a198dd77b77924eb15a705beb665


    Headers

    Imports

    Sections