General
-
Target
sadf.exe
-
Size
37KB
-
MD5
76ebba129360ad5093f0fe66910eb06d
-
SHA1
a0297ed108f534539bda64c7c0df0caefc18ec09
-
SHA256
f8388847ebddbc0c6db43ede0ee839fa304fc4786d4a7c8285eb746a5a2ee711
-
SHA512
b752d9d3e9fab50b1f1a4b3cfe565dc5c0bd1a909abe0b88ae5ee99c241280dace99ee33a6cc5bf2447bbb11975fb6e45b835c380555fb31fa5b15f7d4948bdc
-
SSDEEP
768:LQLm41fM01vA4yRzFiCRn7IYbo7gMaBMOF6c629ptoj:LL41fMSv1AnRnFLMaMOF6c6YK
Score
10/10
Malware Config
Extracted
Family
gozi_ifsb
Botnet
200000
C2
trackingg-protectioon.cdn1.mozilla.net
45.8.158.104
188.127.224.114
weiqeqwns.com
wdeiqeqwns.com
weiqeqwens.com
weiqewqwns.com
iujdhsndjfks.com
Attributes
-
base_path
/uploaded/
-
build
250246
-
exe_type
loader
-
extension
.pct
-
server_id
50
rsa_pubkey.plain
aes.plain
Signatures
-
Gozi_ifsb family
Files
-
sadf.exe
1640d668d1471f340cbe565fe63522f6
Headers
Imports
Sections