Overview

overview

10

Static

static

10

4416-135-0...ry.exe

windows7-x64

4416-135-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    4416-135-0x0000000000400000-0x0000000002C4E000-memory.dmp

  • Size

    40.3MB

  • MD5

    78ab3d622a33a7b8753c2f84fc87effb

  • SHA1

    fdf955393ec1ef35d1957c2b59b73c3d5c7a5de9

  • SHA256

    60d9eb98ee605a67418cda903c9d0b70ebd33a0f561995448480603408dcce78

  • SHA512

    44145dba153a3ea24fb55835770cc6955fdaebde3412f49addcbc9bed445cf30c358527ab8b415484d905374b44f213920c979bed440157c72a080f606a663c5

  • SSDEEP

    6144:69Wr+fBar3660haEztn+ooxupmL+KhjT:69Wr+Y76taEZn+ooxupmL

Score
10/10
isfb7701gozi

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

7701

C2

checklist.skype.com

62.173.145.223

31.41.44.105

45.89.66.58
Attributes
  • base_path

    /drew/

  • build

    250249

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 4416-135-0x0000000000400000-0x0000000002C4E000-memory.dmp
    .exe windows x86


    Headers

    Sections