Analysis
-
max time kernel
100s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30-11-2022 10:05
Static task
static1
Behavioral task
behavioral1
Sample
eee617806c18710e8635615de6297834.dll
Resource
win7-20220812-en
2 signatures
150 seconds
General
-
Target
eee617806c18710e8635615de6297834.dll
-
Size
170KB
-
MD5
eee617806c18710e8635615de6297834
-
SHA1
a629961de369fac6e25b2846bc06df4997a47669
-
SHA256
12d88935437064d8478bc4adec0c0042fb73da774905004c7de55e559729e15c
-
SHA512
93c9faa68616b9fa6141997f93f93279dbd62cf4e0518c37b0692352661c982a7bc5b698bed732ae35e29c56e5edd6c18a5dc48791d8103efae3d849d1db41bf
-
SSDEEP
3072:Efo9DTdl4eZKj0zdq0cAE0I4Cg/RWxZ0PD1C5G6z7bP1V621u4W:pZBlVZgodTcLt4Cg/Rr1alz7bPv62wx
Malware Config
Extracted
Family
gozi
Botnet
202206061
C2
https://gigimas.xyz
https://reaso.xyz
Attributes
-
host_keep_time
60
-
host_shift_time
60
-
idle_time
20
-
request_time
10
aes.plain
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3204-132-0x0000000002B90000-0x0000000002BA3000-memory.dmpFilesize
76KB