General

  • Target

    3237ec73a4f16533fd2c3fb92b3caf43e42b5c9f11d61a5f8576a86c478f0b55_unpacked

  • Size

    108KB

  • MD5

    3dfa4f44613b1ad60b9d592a3efd7289

  • SHA1

    761848e7a9b9ba4f02c8cd45076e4f269a674e70

  • SHA256

    d1b4045990964610141800df6c538a05d00aadb8b28390d91de28aa5b8ac90af

  • SHA512

    983f1165ca7d36f860cbb111ad846618ff6039da24d2180434b2e1f89be80937e93e967f64922fbeebdfa790b8532c21a8880fbb37ffcea646ff8f72042f3de6

  • SSDEEP

    3072:3l6Rrc/z9Lh39PvrYnD2qlaleOMEKlKg5fUny:cxcb9Lh5sCqlalevSg3

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

1000

C2

tandlawsnative.su/ne_utils/front/xxx

leendeilco-1000.su/ne_utils/front/xxx

princlegislative.su/ne_utils/front/xxx

Attributes
  • exe_type

    worker

rsa_pubkey.plain
serpent.plain

Signatures

Files

  • 3237ec73a4f16533fd2c3fb92b3caf43e42b5c9f11d61a5f8576a86c478f0b55_unpacked
    .dll windows x86

    a0deb5ee7cc9322a0854ead28e744a61


    Headers

    Imports

    Exports

    Sections