Overview

overview

10

Static

static

10

gozi.dll

windows7-x64

1

gozi.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    gozi.payload-disk

  • Size

    43KB

  • MD5

    a3068aae0158ed3dd9805755394f28c1

  • SHA1

    30d56782a1782982dddf315d0e8f4810e85acb67

  • SHA256

    90899f0cae6331ec8615641155f1b1018434d028644ff725af600b6e78c47c71

  • SHA512

    2de29792897811bf52cd3adab1d6da70ab07b78864a1b3b34673cef2279c0b97b1e25497fb759aa125ba4437c73e038a7ac2d1cd02ff16331cdf45dddc7e7e9d

  • SSDEEP

    768:HO60dvSXUWzHY4kD/zaho82WVV3rh5Uznoo7e6GzheOB/G7gpdS4JowCyjQBO:HOLgy4kD/2H2WjbhcTGNeOdG7uS45QBO

Score
10/10
isfb7703gozi

Malware Config

Extracted

Family

gozi

Botnet

7703

C2

checklist.skype.com

62.173.138.234

31.41.44.112

91.107.119.114
Attributes
  • base_path

    /drew/

  • build

    250249

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • gozi.payload-disk
    .dll windows x86

    ef075d26b728b78a932306e24062e80c


    Headers

    Imports

    Sections