General
-
Target
4524-147-0x00000000021E0000-0x0000000002275000-memory.dmp
-
Size
596KB
-
MD5
1d392cea60039d646a0c827de1d90261
-
SHA1
b65c5fb4d0a8e221e6b604ae570798e95ca97491
-
SHA256
8add857dfc19d6efbe0a34955f6b01a9b78c69c0720e4b67f49c0d7a91a3ba15
-
SHA512
b29a957f531c08a73511a28e8b1f2b202bbf6dc651fe64b4e0f26658f304e5d4de5531fcbbfc5e64d24c8a862dcc2a80e8a182d9cb8ecb70b7c47f79f905bff3
-
SSDEEP
768:L2Hhn3rXzv9ywyV34OB9bl5n+iRjn9P1avZa9Bmr1h097mI5:shn3zxjyt5+0zavZangX097m
Score
10/10
Malware Config
Extracted
Family
gozi
Extracted
Family
gozi
Botnet
22500
C2
confisg.edge.skype.com
http://
s28bxcw.xyz
config.edgse.skype.com
http://89.43.107.7
Attributes
-
base_path
/recycle/
-
build
250249
-
exe_type
loader
-
extension
.alo
-
server_id
50
rsa_pubkey.plain
aes.plain
Signatures
-
Gozi family
Files
-
4524-147-0x00000000021E0000-0x0000000002275000-memory.dmp
Headers
Sections