General
- Target d2ef5.7z
- Size 32KB
- Sample221003-rljfrsagar
- SHA256 b5c66177a6ae24e1d4c6e80d127cc09d400acd77f55a633972aefd28582c8d5f
- MD5 dcb449e4751bfb8a9c112333f6d82152
- SHA1 20a14da3ba9ecccc93b01726d0cc114a18ea5ae6
- SHA512 15a5f4d876853b764ed464e616560c7b58585a7912675804b48ba0c8d034e1e3c1f594448d62c01362160e17ae8059b02c5a7b87cdd08cbf4a668ad606d8a11a
- SSDEEP 768:ubrRt8r1nHebFDuByT5JMj1Ra1wBKZ8VwQq4tERDoUzFHgnB6m:8t81sFgyTH0Wl8VXtERM007
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
d2ef5.exe
Resource
win7-20220901-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
10101
C2
-
trackingg-protectioon.cdn1.mozilla.net
-
45.8.158.104
-
188.127.224.114
-
weiqeqwns.com
-
wdeiqeqwns.com
-
weiqeqwens.com
-
weiqewqwns.com
-
iujdhsndjfks.com
Attributes
-
base_path
/uploaded/
-
build
250246
-
exe_type
loader
-
extension
.pct
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target d2ef5.exe
- Size 37KB
- SHA256 1056ea3dad265dd554362bc0bd67f08fa2b9f3e5839e6e4fb197831a15c8acef
- MD5 ae3d7de4671718a92cdceae507d9c5e2
- SHA1 1bc85809ddd4411897232c691a2c866f5db67175
- SHA512 bb9433baa53b018356e5e164c05196a0d29213466b8ad4caf428636977b829406a01be258b5560e8c4fd69e646f564867131ba52cde860cc9d6add3c8989e488
- SSDEEP 768:eQLm41fM01vAPyRPq63goMWPXE2bE/JVMq2LATqeeAeOu2D2wqmLiuMPc:eL41fMSvGAPqlaPGhVMq2LpeReOb2Pmi
- MD5 SHA1 SHA512 SSDEEP