Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    53fc091a25ec54675752aa226ec0034dc02bd0d472cc98331c47bc5711046410.bin

  • Size

    36KB

  • MD5

    71511eefe6be7c8e6bcf85222d024b1d

  • SHA1

    7ae8e8cbc003b0d5ec84d876df4a50a91de80516

  • SHA256

    53fc091a25ec54675752aa226ec0034dc02bd0d472cc98331c47bc5711046410

  • SHA512

    02a3aaa8ea420b6e7bc792d2604bc480e513deb2c1384e3449b77b6f6d792408cf87194ddc11843334441bfbb107f4524bdccdf9d845777954451e1bccae5d6f

  • SSDEEP

    768:vKbMPv5JL/yWeM4CPSlWoEKCCldH24pjwg3jllNeErDqrL:v4MHLL/2wPumCXnpjwgLkEwL

Score
10/10
isfb20000gozi

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

20000

C2

trackingg-protectioon.cdn4.mozilla.net

79.132.130.171

45.11.182.30

protectioon.cdn4.mozilla.net

79.132.128.228

185.189.151.61
Attributes
  • base_path

    /fonts/

  • build

    250249

  • exe_type

    loader

  • extension

    .bak

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 53fc091a25ec54675752aa226ec0034dc02bd0d472cc98331c47bc5711046410.bin
    .exe windows x86

    1640d668d1471f340cbe565fe63522f6


    Headers

    Imports

    Sections