Overview

overview

10

Static

static

10

gozi.dll

windows7-x64

1

gozi.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    gozi.payload-disk

  • Size

    43KB

  • MD5

    851e3931eb9af443aebe8abdb60f9469

  • SHA1

    b13e1900449afbb908511dee343a14442a0fbbc1

  • SHA256

    bd48d2ca9fc8aa44bdee5fe564c15cb8fff88da0081cae06e6a3153ea599f48a

  • SHA512

    1241a219e8b616e65d57b6bc58398df2972b120ae243bc3f258936d2a6f431cfce18fe164cc573733bc390bf1bf0c433df07f7b4cf986f816edf43771a70e2e4

  • SSDEEP

    768:ImQp7q0kzrdzjj+jVmXaKrOXNk4snxuZhTeOx1wl7gpQYPEub0c1B:INp7q0WV+pmKe890QeOxel7/YPEu0G

Score
10/10
20000gozi_ifsb

Malware Config

Extracted

Family

gozi_ifsb

Botnet

20000

C2

trackingg-protectioon.cdn1.mozilla.net

185.240.103.79

weiqeqwns.com

wdeiqeqwns.com

weiqeqwens.com

weiqewqwns.com
Attributes
  • base_path

    /uploaded/

  • build

    250239

  • exe_type

    loader

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • gozi.payload-disk
    .dll windows x86

    ef075d26b728b78a932306e24062e80c


    Headers

    Imports

    Sections