gozi | 1636-59-0x0000000000400000-0x000000000044C000-memory[.]dmp

General

Target
1636-59-0x0000000000400000-0x000000000044C000-memory.dmp
Size 304KB
Sample230308-h3pvfaeb4y
SHA256 834148478cb59e03a60109418315cc6b9d47984a068a918141b660c757bca442
MD5 a5e18bce005154f940337efd32feabac
SHA1 8ffb7fb3421d586b2998a9d00680e9a3a68a7466
SHA512 60c24b49089c3d163450b079259b3c96f756d468a123df36be5d48d31b972ade23dc4c3e500b1d5fabe92d9985a3d1983e43c2b67009a74dcbf8b74f695742a4
SSDEEP 3072:VfK9prNoVUE3Hn5PcN6ugTCIKmO8YUAWDE/Rp9oYFGH52c:RK9prOVUuGNYDlO8YI4Zp9oS
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

isfb 7711 gozi

Family

Family

Botnet

C2

Attributes

rsa_pubkey.plain

aes.plain

SHA256 834148478cb59e03a60109418315cc6b9d47984a068a918141b660c757bca442
MD5 a5e18bce005154f940337efd32feabac
SHA1 8ffb7fb3421d586b2998a9d00680e9a3a68a7466
SHA512 60c24b49089c3d163450b079259b3c96f756d468a123df36be5d48d31b972ade23dc4c3e500b1d5fabe92d9985a3d1983e43c2b67009a74dcbf8b74f695742a4
SSDEEP 3072:VfK9prNoVUE3Hn5PcN6ugTCIKmO8YUAWDE/Rp9oYFGH52c:RK9prOVUuGNYDlO8YI4Zp9oS
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

7649

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths