Overview

overview

10

Static

static

10

2060-135-0...ry.dll

windows7-x64

3

2060-135-0...ry.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2060-135-0x0000000004910000-0x000000000491D000-memory.dmp

  • Size

    52KB

  • MD5

    96d067055bf10b5096b46ee4abfc6fbc

  • SHA1

    a6c6f0e120de81195448b7ba4ee9c88c11aec519

  • SHA256

    57fb24d9da0146208de58b8652cc0abadde0107e2ac557fe79f5f35a76f87a20

  • SHA512

    f2df0729637bdec5dcad3bd0b9c4b820374a5d057380dd5ac46e5a9b745d343f0284f0ba3e7a10ad6da79758235cdf46fb111820489766adf3a4cca055d50199

  • SSDEEP

    768:z9g1qrf76ICP/U41mHG7WHmb017Ah6q59O9s7xtspdM3zthK3D1Gc:zq1qiP/UImPI017cxltspdMOD1Gc

Score
10/10
isfb7709gozi

Malware Config

Extracted

Family

gozi

Botnet

7709

C2

checklist.skype.com

62.173.141.252

31.41.44.33

109.248.11.112
Attributes
  • base_path

    /drew/

  • build

    250255

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 2060-135-0x0000000004910000-0x000000000491D000-memory.dmp
    .dll windows x86


    Headers

    Sections