General
- Target 5620000.dll.exe
- Size 227KB
- Sample220922-rt5nzabff9
- SHA256 f089af1773c0e2be4b52aa9ce4d5b5aeb6fe904d5e5672f4f17a9493bb766200
- MD5 9b1541c0ddbc3d744feca2af7b314df5
- SHA1 f764d93650715cfd586563601ac0e95f1fb50eff
- SHA512 6b8c671e0982ab92dff737b1157b1aa8eef5b11eadfaed698835345641f4f87d18ce8b3a69ab7f0e61d5eeda2e78a8ebccdb732bed97c2737626d4a7c364b276
- SSDEEP 3072:l5hinZgCo+NjJWSsznC2OCyzjFIz4V1T/JDR1v6BB78C752cjCdB5e:l+nZ1o+NJWbn2CMFIzSTRDR1v6R5mB
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
5620000.dll
Resource
win7-20220812-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5620000.dll
Resource
win10v2004-20220812-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
10102
C2
-
trackingg-protectioon.cdn1.mozilla.net
-
45.8.158.104
-
188.127.224.114
-
weiqeqwns.com
-
wdeiqeqwns.com
-
weiqeqwens.com
-
weiqewqwns.com
-
iujdhsndjfks.com
Attributes
-
base_path
/uploaded/
-
exe_type
worker
-
extension
.pct
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target 5620000.dll.exe
- Size 227KB
- SHA256 f089af1773c0e2be4b52aa9ce4d5b5aeb6fe904d5e5672f4f17a9493bb766200
- MD5 9b1541c0ddbc3d744feca2af7b314df5
- SHA1 f764d93650715cfd586563601ac0e95f1fb50eff
- SHA512 6b8c671e0982ab92dff737b1157b1aa8eef5b11eadfaed698835345641f4f87d18ce8b3a69ab7f0e61d5eeda2e78a8ebccdb732bed97c2737626d4a7c364b276
- SSDEEP 3072:l5hinZgCo+NjJWSsznC2OCyzjFIz4V1T/JDR1v6BB78C752cjCdB5e:l+nZ1o+NJWbn2CMFIzSTRDR1v6R5mB
- MD5 SHA1 SHA512 SSDEEP
Score1/10