General

  • Target

    0d6014f1d2487230c3bb38f31d2742577f84fd2f2e0d97be5fb9cf28b7ab6de9_unpacked_x64

  • Size

    61KB

  • MD5

    3d9c14da641e84cff4d9cffd8330537e

  • SHA1

    24573ffeee7a7ee39699cb4f16316446425df43b

  • SHA256

    10efad7959482d08892d7e72acc341f5970c04dc5504d2fd48d02b5a0290fb1b

  • SHA512

    2cc5e82fda3cbfde6f1dd7fc37765759ea2e1e403580cbcec7d59815eace718b7b6c55c4635c5c6c70d402423ca38e13f3c3ea34b9b71fba3ebe49ae26be8c99

  • SSDEEP

    1536:Ar1AFUn6gevPncssmevqrHEZFose6N9w2rL:AJAFUn6gIpepFose6N9w

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

1091

C2

pop.project-ip.co.uk

Attributes
  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Signatures

Files

  • 0d6014f1d2487230c3bb38f31d2742577f84fd2f2e0d97be5fb9cf28b7ab6de9_unpacked_x64
    .dll windows x64

    b809abc415765e3973a9871c56f92b76


    Headers

    Imports

    Sections