Overview

overview

10

Static

static

10

4336-172-0...ry.exe

windows7-x64

1

4336-172-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4336-172-0x00000000001E0000-0x00000000001EE000-memory.dmp

  • Size

    56KB

  • Sample

    230216-xscjpaah7y

  • MD5

    3510d32174adbfeb8d13ebc002b56749

  • SHA1

    44c5d536d8fbe45cd7eec5be0cc255994c370fe1

  • SHA256

    206c996af97c4d83acd4c50e0bf7f1ae1cf02f8ce51d36bb2050511b54f8f6fb

  • SHA512

    220bdc9168e819e1dcfaaa828f2ccba4739ee31f9880f3bfe40695be0b71b3835614ec96d57b08bc965cda8c6a1a388b72005999fa5c044a61ffaf88c1ed1983

  • SSDEEP

    768:9wlQajsGtMGoR4jInhpp55dWSlkiidEfUPJqBQPt04:92QaAGQR4jaDtmiuqURq

Score
10/10
gozi1001isfb

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

1001

C2

https://checklist.skype.com

http://176.10.125.84

http://91.242.219.235

http://79.132.130.73

http://176.10.119.209

http://194.76.225.88

http://79.132.134.158
Attributes
  • base_path

    /microsoft/

  • build

    250256

  • exe_type

    loader

  • extension

    .acx

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      4336-172-0x00000000001E0000-0x00000000001EE000-memory.dmp

    • Size

      56KB

    • MD5

      3510d32174adbfeb8d13ebc002b56749

    • SHA1

      44c5d536d8fbe45cd7eec5be0cc255994c370fe1

    • SHA256

      206c996af97c4d83acd4c50e0bf7f1ae1cf02f8ce51d36bb2050511b54f8f6fb

    • SHA512

      220bdc9168e819e1dcfaaa828f2ccba4739ee31f9880f3bfe40695be0b71b3835614ec96d57b08bc965cda8c6a1a388b72005999fa5c044a61ffaf88c1ed1983

    • SSDEEP

      768:9wlQajsGtMGoR4jInhpp55dWSlkiidEfUPJqBQPt04:92QaAGQR4jaDtmiuqURq

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks