Overview

overview

10

Static

static

10

1218d051c0...4b.dll

windows7-x64

1

1218d051c0...4b.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1218d051c0cd19ca2a19335dbcbfb499c1ad12717a128b497d7390777db3f64b

  • Size

    43KB

  • MD5

    89245cc5cea0163c1fbeb3a81a7ae8e5

  • SHA1

    ab2f2da4c30e9a1a2941254d422347e37fcc623b

  • SHA256

    1218d051c0cd19ca2a19335dbcbfb499c1ad12717a128b497d7390777db3f64b

  • SHA512

    dff1fdd4ac82ffd940b635d0a4a788ac55e9278d7bbf739e0cc19b991ee4f958ed8d10641586965922261ad8d84d56d0645cc17017fe959978c37a899de78667

  • SSDEEP

    768:qI+CRSNlUI6Vz9HBkBtz41492bJzFL6+Q3sOU53E7g4+8fOWO:qI+YSbU3R9HE2C92bJfWsOUVE7B

Score
10/10
isfb999gozi

Malware Config

Extracted

Family

gozi

Botnet

999

C2

config.edge.skype.com

146.70.35.138

146.70.35.142
Attributes
  • base_path

    /phpadmin/

  • build

    250227

  • exe_type

    loader

  • extension

    .src

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 1218d051c0cd19ca2a19335dbcbfb499c1ad12717a128b497d7390777db3f64b
    .dll windows x86

    0d41e840891676bdaee3e54973cf5a69


    Headers

    Imports

    Sections