General
- Target 7170000.dll.exe
- Size 227KB
- Sample221004-p8m2csbab4
- SHA256 038d149bf92158353f6297b89f6abe3de1c360d81b81fde38bdde90a0e28382a
- MD5 0f7ef72fc550c1f92b5378b4c26efc93
- SHA1 e372c8a56720e5afb2062d434fc880cf81f0b23c
- SHA512 3ad89e1e6759b72b97bfa18be5cfd821fc363848f48443c121e78eb35818aedfb20ede3099462459224269905d05952e274847141229cc5fda9b61124e239671
- SSDEEP 3072:TlfGqwJTeTEom3lIkR2SCD6q9KgyItk78mV0dfgxT/cqA9w5VgCK5hcjLctxJFoc:TlDosEPR66q9KgylInd6oqA9D5JnFoc
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
7170000.dll
Resource
win7-20220901-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
7170000.dll
Resource
win10v2004-20220812-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
200000
C2
-
trackingg-protectioon.cdn1.mozilla.net
-
45.8.158.104
-
188.127.224.114
-
weiqeqwns.com
-
wdeiqeqwns.com
-
weiqeqwens.com
-
weiqewqwns.com
-
iujdhsndjfks.com
Attributes
-
base_path
/uploaded/
-
exe_type
worker
-
extension
.pct
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target 7170000.dll.exe
- Size 227KB
- SHA256 038d149bf92158353f6297b89f6abe3de1c360d81b81fde38bdde90a0e28382a
- MD5 0f7ef72fc550c1f92b5378b4c26efc93
- SHA1 e372c8a56720e5afb2062d434fc880cf81f0b23c
- SHA512 3ad89e1e6759b72b97bfa18be5cfd821fc363848f48443c121e78eb35818aedfb20ede3099462459224269905d05952e274847141229cc5fda9b61124e239671
- SSDEEP 3072:TlfGqwJTeTEom3lIkR2SCD6q9KgyItk78mV0dfgxT/cqA9w5VgCK5hcjLctxJFoc:TlDosEPR66q9KgylInd6oqA9D5JnFoc
- MD5 SHA1 SHA512 SSDEEP
Score1/10