Overview

overview

10

Static

static

10

2320-181-0...ry.exe

windows7-x64

1

2320-181-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2320-181-0x0000000000E40000-0x0000000000E4E000-memory.dmp

  • Size

    56KB

  • Sample

    230216-2k4enaca9w

  • MD5

    a46b336e6b4d847ecc39ef9058a7065f

  • SHA1

    28dedc7686426106f67f43a1a37598dab545d419

  • SHA256

    ecd9963b51444e4ba8cd01bbe3d1142cd2ceb6588f1d5380920b4c808c36e9dc

  • SHA512

    6f4895801ac82d7a7ac959cb1972c011795ff2f3ab08a122a3401e72c235b50a4a1fa1a1f824522dcc4b6f3d274c4794dc246b4e0bcc2732a4e26819b544a2c0

  • SSDEEP

    768:hElHqy8pFoR4jInhpp55dWSlkiidEfUPJqBQPt04:hE9qy8gR4jaDtmiuqURq

Score
10/10
gozi1001isfb

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

1001

C2

https://checklist.skype.com

http://176.10.125.84

http://91.242.219.235

http://79.132.130.73

http://176.10.119.209

http://194.76.225.88

http://79.132.134.158
Attributes
  • base_path

    /microsoft/

  • build

    250256

  • exe_type

    loader

  • extension

    .acx

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      2320-181-0x0000000000E40000-0x0000000000E4E000-memory.dmp

    • Size

      56KB

    • MD5

      a46b336e6b4d847ecc39ef9058a7065f

    • SHA1

      28dedc7686426106f67f43a1a37598dab545d419

    • SHA256

      ecd9963b51444e4ba8cd01bbe3d1142cd2ceb6588f1d5380920b4c808c36e9dc

    • SHA512

      6f4895801ac82d7a7ac959cb1972c011795ff2f3ab08a122a3401e72c235b50a4a1fa1a1f824522dcc4b6f3d274c4794dc246b4e0bcc2732a4e26819b544a2c0

    • SSDEEP

      768:hElHqy8pFoR4jInhpp55dWSlkiidEfUPJqBQPt04:hE9qy8gR4jaDtmiuqURq

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks