General

  • Target

    5c70000.dll.exe

  • Size

    228KB

  • MD5

    59399a271b3b30f849c0828bc3c48b2f

  • SHA1

    537a6292742640cd7d32d0ad7a6ba48f66ea7963

  • SHA256

    5ead9dc2ee1f22e08c72c162a379c51b364c6e8fb51328b8bc25d4d2e971ad14

  • SHA512

    aa85fef795a1bb3e00d13035ecda4354e1f7b8bd4ea72880509a5984d34bd58753a94ea6e704479f1951be66330352f75f1944066e62cc4424de475311ec15d3

  • SSDEEP

    6144:N534X5elaqMGCR2Ak9P56TLz8xb9h+b35eZc:Nt4XAlabG62Ak9P5aP8hr+bac

Score
10/10

Malware Config

Extracted

Family

gozi

Botnet

5

C2

lentaphoto.at

iujdhsndjfks.ru

gameindikdowd.ru

jhgfdlkjhaoiu.su

Attributes
  • base_path

    /uploaded/

  • exe_type

    worker

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 5c70000.dll.exe
    .dll windows x64

    81de4ee1071a8320787d7c9e149ace7f


    Headers

    Imports

    Sections