General
- Target 51b0000.dll.exe
- Size 227KB
- Sample220922-rt5nzafdgr
- SHA256 e1885b84829f448f9d549144ea8221f422a9243a4693101a145c0836cc13fac1
- MD5 feb09e0eb2b4cc5fefbf9220557ef9b4
- SHA1 f98d2b8a622891acc9c2a40115d4c2357e95ca1f
- SHA512 ceb19f723b2afae856f17838d3a09008e9e922ae78efaaf63f16f8391238024073b270be3e4872349c31a0fac314c1a152f3b2a77c149429d7269b7562b6badf
- SSDEEP 3072:UlfGqwJTeTEom3lIkR2SCD6q9KgyItk78mV0dfgxT/cqAlw5VgCK5hcjFwxJFocW:UlDosEPR66q9KgylInd6oqAlD5dnFoc
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
51b0000.dll
Resource
win7-20220812-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
51b0000.dll
Resource
win10v2004-20220812-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
10103
C2
-
trackingg-protectioon.cdn1.mozilla.net
-
45.8.158.104
-
188.127.224.114
-
weiqeqwns.com
-
wdeiqeqwns.com
-
weiqeqwens.com
-
weiqewqwns.com
-
iujdhsndjfks.com
Attributes
-
base_path
/uploaded/
-
exe_type
worker
-
extension
.pct
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target 51b0000.dll.exe
- Size 227KB
- SHA256 e1885b84829f448f9d549144ea8221f422a9243a4693101a145c0836cc13fac1
- MD5 feb09e0eb2b4cc5fefbf9220557ef9b4
- SHA1 f98d2b8a622891acc9c2a40115d4c2357e95ca1f
- SHA512 ceb19f723b2afae856f17838d3a09008e9e922ae78efaaf63f16f8391238024073b270be3e4872349c31a0fac314c1a152f3b2a77c149429d7269b7562b6badf
- SSDEEP 3072:UlfGqwJTeTEom3lIkR2SCD6q9KgyItk78mV0dfgxT/cqAlw5VgCK5hcjFwxJFocW:UlDosEPR66q9KgylInd6oqAlD5dnFoc
- MD5 SHA1 SHA512 SSDEEP
Score1/10