Overview

overview

10

Static

static

10

unpacked_gozi.bin.dll

windows7-x64

1

unpacked_gozi.bin.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    unpacked_gozi.bin.dll

  • Size

    43KB

  • MD5

    4f65e575df96122bbce04e538e531d5e

  • SHA1

    bc7db9bff284dc162af5945d849b76fccbd25125

  • SHA256

    a42fad7a44006d21404affed1fb90a67ecf5e2bc6436dc3729705ca29b4f91e4

  • SHA512

    2a4da54527ec913c24f3d49595bec39800ec406de3acc8c1cf8486e03955a1d11a8551a1e94f378d6aeda6d7dd624e6fc602afe065bc81d5460511d9cac0d31d

  • SSDEEP

    768:/0gsqVXye2rS/Q4VYXQIVpCHlNBmQWGk2j+A6ewBvu7gpzhK3D1Gcb:/9sq8S/QEYXQIVWlvmYp6ewNu7hD1Gc

Score
10/10
isfb7708gozi

Malware Config

Extracted

Family

gozi

Botnet

7708

C2

checklist.skype.com

62.173.147.156

31.41.44.3

46.8.19.140

45.151.232.3

62.173.139.21

185.142.99.47

31.41.44.121
Attributes
  • base_path

    /drew/

  • build

    250255

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • unpacked_gozi.bin.dll
    .dll windows x86

    ef075d26b728b78a932306e24062e80c


    Headers

    Imports

    Sections