Overview

overview

10

Static

static

10

cee13db72b...63.dll

windows7-x64

1

cee13db72b...63.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    cee13db72b58d980778380b7382a4c3fe976ed2462fd21386e1d11a4e6669463.bin

  • Size

    108KB

  • MD5

    52b4480de6f4d4f32fba2b535941c284

  • SHA1

    4f63c0054ee983734ae9bf8f4e9aa0383748de8f

  • SHA256

    cee13db72b58d980778380b7382a4c3fe976ed2462fd21386e1d11a4e6669463

  • SHA512

    48cb6b38aaf71c984acc7f18c89c6787762b2219461d158929f9f9056b604e36dfb5ada3f55867c6f8099fdde3a79c89ae7cbeb6d673908bc9489386587e94b9

  • SSDEEP

    3072:an697qlalkDnoT0N93qznrXjtjEvgWOtlJM0fv62:VqlalkrtcjrXpjag5tj/

Score
10/10
3184gozi_ifsb

Malware Config

Extracted

Family

gozi_ifsb

Botnet

3184

C2

qfelicialew.city

mzg4958lc.com

gxuxwnszau.band
Attributes
  • build

    214062

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Signatures

Files

  • cee13db72b58d980778380b7382a4c3fe976ed2462fd21386e1d11a4e6669463.bin
    .dll windows x86

    cecc6267368cfbfce650c8c332ec214e


    Headers

    Imports

    Sections