Overview

overview

10

Static

static

10

unpacked_m...vl.exe

windows7-x64

1

unpacked_m...vl.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    unpacked_maintainabovl.exe

  • Size

    52KB

  • MD5

    c94dd95dab700b9217ff1cc715dd7368

  • SHA1

    6522172a390af10c2a3d851dc88da0624c5dd071

  • SHA256

    d71edaf61b8f536eb7f9d28a345cded5ca3b2b84a6f4216671ee9fc2b7b4fbd4

  • SHA512

    7697a33a227bb3190037fab5956170d2ca09270cb0b6e4a2ce3b6a1c3409af04239ada454445e2ab72ca7804d510c4a89f12e6c4cd467b0cdfd90cefb12fcece

  • SSDEEP

    768:yKbMPvmKymyV34OB9bl5n+iRjn9P1avZa9Bmr1h097mI5ce:y4MHhRyt5+0zavZangX097m1

Score
10/10
isfb7704gozi

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

7704

C2

checklist.skype.com

62.173.149.202

31.41.44.158

193.0.178.157
Attributes
  • base_path

    /drew/

  • build

    250249

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • unpacked_maintainabovl.exe
    .exe windows x86

    1640d668d1471f340cbe565fe63522f6


    Headers

    Imports

    Sections