Overview

overview

10

Static

static

10

1984-59-0x...ry.exe

windows7-x64

1

1984-59-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1984-59-0x0000000000400000-0x0000000002BBE000-memory.dmp

  • Size

    39.7MB

  • MD5

    a49003143f7beed2d07288abaf12ac4d

  • SHA1

    7f00af89a2ca8a4f4a5e19fcda737229064396a9

  • SHA256

    8519fb4fd5fb8569b56f36a665725407c869578ac3ec47917f7102053c26ea39

  • SHA512

    7c2bb6b6523a3b085b77a61f1212079566cd1f03a12ee9947224998aa70817d122cc081628593a54a6b9ac7eeb82bf36e12eee7333b46a3c79c53128d03ce76c

  • SSDEEP

    3072:nfKYJnKUZekHml9jSCwIafmuaXZussButDMZDXvCXzdVKu6HRnayjGZEOF:fKYJKH7l9MvmlABuWFXvSM9NaeE

Score
10/10
isfb7710gozi

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

7710

C2

checklist.skype.com

62.173.140.103

31.41.44.63

46.8.19.239

185.77.96.40

46.8.19.116

31.41.44.48

62.173.139.11

62.173.138.251
Attributes
  • base_path

    /drew/

  • build

    250255

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 1984-59-0x0000000000400000-0x0000000002BBE000-memory.dmp
    .exe windows x86


    Headers

    Sections