General
-
Target
2008-59-0x0000000000400000-0x0000000002BBE000-memory.dmp
-
Size
39.7MB
-
MD5
9fa69475300dbced96f9aea8fa77024c
-
SHA1
d4d5f7656596a8bd1dca208f17124b98d448d146
-
SHA256
26110ac759c45d7370d10b854300be0582a31e195511f70a3a50aef99d935de2
-
SHA512
f966da57da11b026f9d9911c6bb7c306b8dcb560be317cd3e8a99cd965eadc6bc1dbbe4451b43c3441933e4d364f0af93145ea6f31ba1510f63a0538f0b9d3eb
-
SSDEEP
3072:nfK5JnKUZekHml9jSCwka/qCaBjuss+MuUQ1GwINU77sDm/lG3bWphFHtUPCXC/c:fK5JKH7l9MTq/O+htgUnsa/liSVtCe
Score
10/10
Malware Config
Extracted
Family
gozi
Extracted
Family
gozi
Botnet
7710
C2
checklist.skype.com
62.173.140.103
31.41.44.63
46.8.19.239
185.77.96.40
46.8.19.116
31.41.44.48
62.173.139.11
62.173.138.251
Attributes
-
base_path
/drew/
-
build
250255
-
exe_type
loader
-
extension
.jlk
-
server_id
50
rsa_pubkey.plain
aes.plain
Signatures
-
Gozi family
Files
-
2008-59-0x0000000000400000-0x0000000002BBE000-memory.dmp
Headers
Sections