General

  • Target

    92c0000.dll

  • Size

    244KB

  • MD5

    5811f8bea7b1b31fff435d784943a18d

  • SHA1

    3dd8a91090730d1f5c00890f2e884d0504e535bb

  • SHA256

    a2360430527557e5644af4e5a83fd446ccb58a90422a52c809113b1c419d6587

  • SHA512

    1e1844d7b3fb1da45e4455b0a47062032318dc1b12af3496f78798d264c17db610e10206d6f864d83e97a69c1fb8046d86b8a5876e238b80c2476bdf062ec443

  • SSDEEP

    6144:nlDosEPR66q9KgylInd6oqAND5HRnFoc:dUPR6D9KDInd6oqANXF

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

10101

C2

trackingg-protectioon.cdn1.mozilla.net

45.8.158.104

188.127.224.114

weiqeqwns.com

wdeiqeqwns.com

weiqeqwens.com

weiqewqwns.com

iujdhsndjfks.com

Attributes
  • base_path

    /uploaded/

  • exe_type

    worker

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 92c0000.dll
    .dll windows x64

    81de4ee1071a8320787d7c9e149ace7f


    Headers

    Imports

    Sections