General

  • Target

    7320000.dll.exe

  • Size

    227KB

  • MD5

    8200aaad58ddb1ca61edd34a0c8fc0bb

  • SHA1

    1caf234c0d5efba93f8554fcda8cf18848f5d0ec

  • SHA256

    154a3d6b6884c0ad1152f84d209053fc2dbabfadae47d22eb1486c83d001cfab

  • SHA512

    a42a30f60ea9f0498c4d21af372c406559fcbf7cefc86c4cef221b882e02e6f58963030aab1aea1abcb4f051aa307b55dd59e40543b77085612c3d61f1fcc0ab

  • SSDEEP

    3072:QlfGqwJTeTEom3lIkR2SCD6q9KgyItk78mV0dfgxT/cqAew5VgCK5hcjRPxJFoc:QlDosEPR66q9KgylInd6oqAeD5mnFoc

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

70000

C2

trackingg-protectioon.cdn1.mozilla.net

45.8.158.104

188.127.224.114

weiqeqwns.com

wdeiqeqwns.com

weiqeqwens.com

weiqewqwns.com

iujdhsndjfks.com

Attributes
  • base_path

    /uploaded/

  • exe_type

    worker

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 7320000.dll.exe
    .dll windows x64

    81de4ee1071a8320787d7c9e149ace7f


    Headers

    Imports

    Sections