General

  • Target

    09bc2a1aefbafd3e7577bc3c352c82ad.bin

  • Size

    55KB

  • MD5

    09bc2a1aefbafd3e7577bc3c352c82ad

  • SHA1

    eb7b0b4ce98998aa78f453e14ee1bde3319c6834

  • SHA256

    6039fcf4b3d79f847f7b545ae0d7767a4d58e12721b049b04ade6550eef549b9

  • SHA512

    234f10dc86467bfea7e12fcc54bde556d972ec83852f9e43e6be05e2dc1ea213b26e4f20277a3cfdaefd9970958cef70191df9f2971bf6e186a9a4cabbcd2bde

  • SSDEEP

    1536:ogWi5BVVWsfV/hAq/ctyaAkFc+evm4VtMQtCP:jWqBVVJfVJaytAJCtS

Score
10/10

Malware Config

Extracted

Family

gozi

Botnet

202206061

C2

https://gigimas.xyz

https://reaso.xyz

Attributes
  • host_keep_time

    60

  • host_shift_time

    60

  • idle_time

    20

  • request_time

    10

aes.plain

Signatures

Files

  • 09bc2a1aefbafd3e7577bc3c352c82ad.bin
    .dll regsvr32 windows x86

    dbf9d6891df624562fb00e6915c2c677


    Headers

    Imports

    Exports

    Sections