Overview

overview

10

Static

static

10

1056ea3dad...ef.exe

windows7-x64

10

1056ea3dad...ef.exe

windows10-2004-x64

10

Resubmissions

23/09/2022, 14:22

220923-rpte5saedn10

23/09/2022, 14:16

220923-rlj3ashba810

Sharing

Copy URL Twitter E-mail

General

  • Target
    8072276119.zip
  • Size 32KB
  • Sample220923-rlj3ashba8
  • SHA256 4de0201aa4121f4f87ff7088f5705f2df799e857ca77f31a46f7a83297e6c85c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
10101gozi_ifsb

Malware Config

Extracted

Family

  • gozi_ifsb

Botnet

  • 10101

C2

  • trackingg-protectioon.cdn1.mozilla.net

  • 45.8.158.104

  • 188.127.224.114

  • weiqeqwns.com

  • wdeiqeqwns.com

  • weiqeqwens.com

  • weiqewqwns.com

  • iujdhsndjfks.com

Attributes
  • base_path

    /uploaded/

  • build

    250246

  • exe_type

    loader

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

File Explorer

  • 8072276119.zip
    .zip 32KB
  • 1056ea3dad265dd554362bc0bd67f08fa2b9f3e5839e6e4fb197831a15c8acef
    .exe 37KB

8072276119.zip

  • SHA256 4de0201aa4121f4f87ff7088f5705f2df799e857ca77f31a46f7a83297e6c85c
  • MD5 SHA1 SHA512 SSDEEP
Password
infected