General
-
Target
1104-56-0x0000000000400000-0x00000000004C9000-memory.dmp
-
Size
804KB
-
Sample
230309-jmej7sab4x
-
MD5
4dd28ecceceb68a30c0f579f7b789a4f
-
SHA1
9adb3a0a0fd6a3217a98bf81e39f635137189dda
-
SHA256
8ce8b55dd3e577e309260c09886cfc4dfc92eceda0208b522c52a57950425a6a
-
SHA512
e82dadb2544b329760510b1d565d305c8fc347e16cc70f9f6188416f6c6296972883fc0d5214f478974128b4f880ee00a02cb642426c80adeadf5c09f7b2ee1c
-
SSDEEP
3072:CfK3gNoVUE3HnQEYIWJwtFtmjZ4RfEvkqkaBuERzLBvqWQw15JTf7mgTsp1+Hc:cK3gOVUuwtOt3CS5EZ1RzlvUSjwrF
Behavioral task
behavioral1
Sample
1104-56-0x0000000000400000-0x00000000004C9000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1104-56-0x0000000000400000-0x00000000004C9000-memory.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
gozi
Extracted
gozi
7712
checklist.skype.com
62.173.141.36
31.41.44.85
193.233.175.98
46.8.210.110
89.116.227.49
-
base_path
/drew/
-
build
250255
-
exe_type
loader
-
extension
.jlk
-
server_id
50
Targets
-
-
Target
1104-56-0x0000000000400000-0x00000000004C9000-memory.dmp
-
Size
804KB
-
MD5
4dd28ecceceb68a30c0f579f7b789a4f
-
SHA1
9adb3a0a0fd6a3217a98bf81e39f635137189dda
-
SHA256
8ce8b55dd3e577e309260c09886cfc4dfc92eceda0208b522c52a57950425a6a
-
SHA512
e82dadb2544b329760510b1d565d305c8fc347e16cc70f9f6188416f6c6296972883fc0d5214f478974128b4f880ee00a02cb642426c80adeadf5c09f7b2ee1c
-
SSDEEP
3072:CfK3gNoVUE3HnQEYIWJwtFtmjZ4RfEvkqkaBuERzLBvqWQw15JTf7mgTsp1+Hc:cK3gOVUuwtOt3CS5EZ1RzlvUSjwrF
Score3/10 -