Overview

overview

10

Static

static

10

Lx6.exe

windows7-x64

10

Lx6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Lx6.exe

  • Size

    37KB

  • MD5

    3b892bea0f8cbe0b61ee380743567d1d

  • SHA1

    90522132e3a97e966e5270a8e105cc33f0d6c4e5

  • SHA256

    6b722961edc010c5487de4ef7eee84b586ac3c3f06dbd1920935ea5f7bb90543

  • SHA512

    120c7f3d22858dd7cb02f67bf6ff38dd9ba1f32d6fdfe18c7f9dde76ab20b435f98f4e4e54b7967422755cb6dedf0c575d360a1339c3a4cff69f556647045e3b

  • SSDEEP

    768:Z41V8UHIm2wyBdcNtW2RTYBfx6w39rDE3Lkjx2K/ZK38ua:ZefIZwAdeD8B56w39HE384h38

Score
10/10
1900gozi_ifsb

Malware Config

Extracted

Family

gozi_ifsb

Botnet

1900

C2

tel12.msn.com

194.76.225.60

185.212.47.133
Attributes
  • base_path

    /doorway/

  • build

    250240

  • exe_type

    loader

  • extension

    .drr

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • Lx6.exe
    .exe windows x86

    a225a198dd77b77924eb15a705beb665


    Headers

    Imports

    Sections