General

  • Target
    056c73060f1553f213982a5bfb4d3535ef0594e1fcb70c8a67bc83e6b5d972c5_unpacked_x64
  • Size 327KB
  • Sample221026-3wzfhsaagm
  • SHA256 b5c292b6a64336e0ceecafa13687b0e26f287a38b2ff8c67d450fe70a49270c9
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • gozi_ifsb

Botnet
  • 1000

Attributes
  • exe_type

    worker

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Signatures

File Explorer

  • 056c73060f1553f213982a5bfb4d3535ef0594e1fcb70c8a67bc83e6b5d972c5_unpacked_x64
    .dll 327KB

056c73060f1553f213982a5bfb4d3535ef0594e1fcb70c8a67bc83e6b5d972c5_unpacked_x64

  • IMPHASH 1b6c850fa221be7355a06863e61fc7f7
  • SHA256 b5c292b6a64336e0ceecafa13687b0e26f287a38b2ff8c67d450fe70a49270c9
  • MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
5780
Magic Number
523
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths