Overview

overview

10

Static

static

10

ursnif_IAT...xe.dll

windows7-x64

1

ursnif_IAT...xe.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ursnif_IAT_corrected.exe.dll

  • Size

    56KB

  • MD5

    8b52c277c63c5877c0e4ca32d1458957

  • SHA1

    1d64f4610c6e0af8a3e3a9d8e8b794fc1bebeef5

  • SHA256

    8d2f90927603c33947463dc9846dc1b7a220ea1f13dc1a0ccfe538d5f83bbfe2

  • SHA512

    9f7022155d4764e625fe1a6b5377eed4b2e7620a9bd03c7f5474112de30bb60b7898c5e9a325035544d01c3621bff103f6b857373d146c1f622772e1abbf1b99

  • SSDEEP

    768:A2KGmsx3R69vSvjyRpq63goMWPXE2bE/JVMq2LATqeeAeOu2D2wqmLiu6:wGBx3R6iApqlaPGhVMq2LpeReOb2Pmp

Score
10/10
5000gozi_ifsb

Malware Config

Extracted

Family

gozi_ifsb

Botnet

5000

C2

config.edge.skype.com

onlinetwork.top

linetwork.top
Attributes
  • base_path

    /drew/

  • build

    250246

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • ursnif_IAT_corrected.exe.dll
    .dll regsvr32 windows x86

    3e85858f9f91b022a15a56437fb6f7c2


    Headers

    Imports

    Exports

    Sections