General

  • Target

    10000000.dll

  • Size

    39KB

  • MD5

    624c0f25a78a671b38deae200552f636

  • SHA1

    ff124be95fe93183cf7e140139763b2ad2126367

  • SHA256

    ed2335f95a1cb6f627f10be64a260b7f6b07a5d9bd5e061136ea1e5110029b85

  • SHA512

    455001678e7de3196f3af487de56bbfd5ba96af0165bce1a8e42f94cc811ee8c10952422ebd139dbdefe96d6d511fe6aaf99214ee1b919c5d40c3836cd2bdc0c

  • SSDEEP

    768:A2QGmsx3R69vovEyRmq63goMWPXE2bE/JVMq2LATqeeAeOu2D2wqmLiuuyiO:qGBx3R6LAmqlaPGhVMq2LpeReOb2Pmpy

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

3000

C2

config.edge.skype.com

89.41.26.99

89.45.4.102

interstarts.top

superlist.top

internetcoca.in

Attributes
  • base_path

    /drew/

  • build

    250246

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 10000000.dll
    .dll regsvr32 windows x86

    3e85858f9f91b022a15a56437fb6f7c2


    Headers

    Imports

    Exports

    Sections