General
-
Target
2188-135-0x0000000004920000-0x000000000492D000-memory.dmp
-
Size
52KB
-
MD5
eba0d624875a93075fda342bd03acd67
-
SHA1
8a848800b26f80a8a3f4498f74cb70c765c92efa
-
SHA256
54a52b9e8311edcea86b0dbd12d557d4d1b19c83c8dc7a8ed725bc66c9a7b6d5
-
SHA512
ed03506658a72ddee15e00cbd6da9482d79276c4197c4e4d0e6889d04749f8da035967a1b9b2c670ed72c9e700b314f543602c3adeb1223991b323293d41b54b
-
SSDEEP
1536:WH2qUg/8ZvnMBgShzxccAfSdMSD1Gc4d:nqFwvMBgSoWdMs1G9d
Score
10/10
Malware Config
Extracted
Family
gozi
Botnet
7710
C2
checklist.skype.com
62.173.140.103
31.41.44.63
46.8.19.239
185.77.96.40
46.8.19.116
31.41.44.48
62.173.139.11
62.173.138.251
Attributes
-
base_path
/drew/
-
build
250255
-
exe_type
loader
-
extension
.jlk
-
server_id
50
rsa_pubkey.plain
aes.plain
Signatures
-
Gozi family
Files
-
2188-135-0x0000000004920000-0x000000000492D000-memory.dmp
Headers
Sections