Analysis
-
max time kernel
20s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
27-11-2022 17:33
Static task
static1
Behavioral task
behavioral1
Sample
bb92a89b3517dd67e060aaf7bce721182a9a2d2af5bf1f15584fbe99f39261ec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb92a89b3517dd67e060aaf7bce721182a9a2d2af5bf1f15584fbe99f39261ec.exe
Resource
win10v2004-20220812-en
General
-
Target
bb92a89b3517dd67e060aaf7bce721182a9a2d2af5bf1f15584fbe99f39261ec.exe
-
Size
506KB
-
MD5
e0c536b519a383a6773dcbfa307cedb7
-
SHA1
2362c70330f68a87d01c896f5f8b8842fd44600a
-
SHA256
bb92a89b3517dd67e060aaf7bce721182a9a2d2af5bf1f15584fbe99f39261ec
-
SHA512
4fbd3e900c9e575ca948ba2b4253ed14dec22dfdbb61581789289c49508f4d756ca9a98880646bc0f0c093dac17b9d124d49136152b0a14901e0e2246e5eba54
-
SSDEEP
12288:GyjuagFPhiFen4Yww3c+fP5odPxezhif96Fy2x2b:GguagFPh0en4JwMg5olxezhigF92b
Malware Config
Extracted
gozi
Extracted
gozi
1005
fia-secure-connect.ru
moriyurw368798.ru
worldparuoli.ru
unikymprogress.ru
ferarirecord.ru
-
exe_type
worker
-
server_id
12
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1948-54-0x0000000074F01000-0x0000000074F03000-memory.dmpFilesize
8KB
-
memory/1948-56-0x0000000000400000-0x00000000004A4000-memory.dmpFilesize
656KB
-
memory/1948-55-0x0000000000230000-0x0000000000279000-memory.dmpFilesize
292KB
-
memory/1948-57-0x0000000000400000-0x00000000004A4000-memory.dmpFilesize
656KB