Overview

overview

10

Static

static

10

4524-147-0...ry.dll

windows7-x64

3

4524-147-0...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4524-147-0x00000000021E0000-0x0000000002275000-memory.dmp

  • Size

    596KB

  • Sample

    221230-csd3asaa5z

  • MD5

    1d392cea60039d646a0c827de1d90261

  • SHA1

    b65c5fb4d0a8e221e6b604ae570798e95ca97491

  • SHA256

    8add857dfc19d6efbe0a34955f6b01a9b78c69c0720e4b67f49c0d7a91a3ba15

  • SHA512

    b29a957f531c08a73511a28e8b1f2b202bbf6dc651fe64b4e0f26658f304e5d4de5531fcbbfc5e64d24c8a862dcc2a80e8a182d9cb8ecb70b7c47f79f905bff3

  • SSDEEP

    768:L2Hhn3rXzv9ywyV34OB9bl5n+iRjn9P1avZa9Bmr1h097mI5:shn3zxjyt5+0zavZangX097m

Score
10/10
gozi22500isfb

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

22500

C2

confisg.edge.skype.com

http://

s28bxcw.xyz

config.edgse.skype.com

http://89.43.107.7
Attributes
  • base_path

    /recycle/

  • build

    250249

  • exe_type

    loader

  • extension

    .alo

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      4524-147-0x00000000021E0000-0x0000000002275000-memory.dmp

    • Size

      596KB

    • MD5

      1d392cea60039d646a0c827de1d90261

    • SHA1

      b65c5fb4d0a8e221e6b604ae570798e95ca97491

    • SHA256

      8add857dfc19d6efbe0a34955f6b01a9b78c69c0720e4b67f49c0d7a91a3ba15

    • SHA512

      b29a957f531c08a73511a28e8b1f2b202bbf6dc651fe64b4e0f26658f304e5d4de5531fcbbfc5e64d24c8a862dcc2a80e8a182d9cb8ecb70b7c47f79f905bff3

    • SSDEEP

      768:L2Hhn3rXzv9ywyV34OB9bl5n+iRjn9P1avZa9Bmr1h097mI5:shn3zxjyt5+0zavZangX097m

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks